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", 0x1000, 0xd0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000200), 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
connect$packet(r1, &(0x7f0000000000)={0x11, 0xe0, 0x0, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x14)

[ 1523.325903][ T3632] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1523.334414][ T3632] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:37:36 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0xf)

03:37:36 executing program 2:
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000005)
perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [], 0x0, "8bebeb894f74c3"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)

03:37:36 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:36 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/2, 0x2}, {&(0x7f0000000080)=""/39, 0x27}, {&(0x7f00000000c0)=""/173, 0xb5}, {&(0x7f0000000180)=""/92, 0x5c}, {&(0x7f0000000200)=""/14, 0xe}, {&(0x7f0000000300)=""/246, 0x6b}, {&(0x7f0000000400)=""/201, 0xc9}], 0x7, 0xd9e, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000540))
openat$incfs(r0, &(0x7f0000000500)='.log\x00', 0x80, 0x168)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff)
write(r2, &(0x7f0000000100), 0xfffffe5d)

[ 1523.799480][ T3665] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1523.808084][ T3665] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:37:36 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x3af4701e)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0)
preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x17, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001340)={0x0, 0x0, "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", "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"})

03:37:36 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x540b, &(0x7f0000000000)=0x13)

03:37:36 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040)=[{0x1, 0x996, 0x1000}, {0x3, 0x81}, {0x3, 0x6, 0x1800}], 0x3)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:37:36 executing program 3:
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e1d, 0x0, @remote}, 0x1c)
dup2(r0, r0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000100)={0x95b, {{0xa, 0x4e24, 0x7, @mcast1, 0xff}}, 0x1, 0x4, [{{0xa, 0x6e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, {{0xa, 0x4e24, 0x51, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffff}}, {{0xa, 0x4e23, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6256}}, {{0xa, 0x4e20, 0x10000, @mcast1, 0xff}}]}, 0x290)
sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
sendto$inet6(r1, 0x0, 0x0, 0x4000010, 0x0, 0x0)

03:37:36 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000015c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffa}]})
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @control={0x84, 0x80000001, 0x7}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x2, &(0x7f00000001c0)="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")
tkill(r0, 0x17)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x4, &(0x7f0000000080)=[{0x4, 0x0, 0x80, 0x6}, {0x2, 0x0, 0x2, 0x3ff}, {0x9, 0x81, 0xe5, 0x200000}, {0x9, 0x5, 0x1e, 0x6}]})
r1 = gettid()
tkill(r1, 0x34)

03:37:36 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@report={0x4c, 0x18, 0x4145, 0x0, 0x0, {0x2, {@in6=@loopback={0x9effffff00000000}, @in=@loopback}}}, 0x4c}}, 0x0)
sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@ax25={{0x3, @default, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="8a1eeef6d90963efc2ef3bb792784675ffde673cd91e8173054d9e77eb33cf4686818a943905cf94df31c70d6f9c29fd9d829f548888e81f510e54dfe63568b290dd14eb5d6d526f08ddbe0dc0d08b71f300c99611d122193a8caa6f2bdb15ed118330af078be9614436a7b59e008e4e0e4fa1dc0b94c15e96f018c6c1ca43584076f9ba48cb6a71eab01ffa896207de8572d691099f0a3532bc63041ed04bd9e379c23257ae729a97a75c03", 0xac}, {&(0x7f0000000380)="a9c4f4f705471582f289d00e9053fee826d239d4d170c4e691af85cedaf1a1130ce00b723efd8ced82ebaae5d7156206c9d7d3585078e8f4d0c6d695af9814bcbd849c5968559539673dda2c7919070eed05c6518b98a323e8688ee8f7ad2ab3f6d1a104ebd761c82ed9c571aecf0a0b02a489f8e02fffbab5e017494fd3f08a1f401e2a9b2471901c2fa0409c2ee75a247e865ccf5953f6d96329b7385f16c3d0e10145befbeca3d34e1c6f247127f6d9ecc4ec3dd7e041e5bce1bddb33eea96967cae403dd8ed70833e23aadcff774", 0xd0}, {&(0x7f0000000480)="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", 0xfa}], 0x3}, 0x0)
socket$netlink(0x10, 0x3, 0x1)
r1 = socket(0x11, 0x800000003, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000400)={r3, 0x3, 0x6, @broadcast}, 0x10)
sendmsg(r0, &(0x7f0000002a40)={&(0x7f0000000240)=@can={0x1d, r3}, 0x80, &(0x7f0000000580)=[{&(0x7f00000002c0)="70749f90bf5456cacdc86e57f36ada72b1f7d9a12c402f28", 0x18}], 0x1, &(0x7f00000005c0)=[{0xc0, 0x105, 0x3f, "77e17dec773fb786e53f58b1789114a9d45718713a63e60be4ebc69fd4f0176fbc1087c3b9f7c0caa3bb3b41d8d8612e6fa9f5bf445a7e0b38381b5fb66893e2766e1bc2f0cb9c403bb50148e79cf4ff1ba3bad61732fb30f1357c0b674ada4802cab73fe64600138209e49c09cdd65b968322c6d5e4ad36e6ff953bd101f46a79183e7d15029fc258a58d29e434b50765777051f6f7d94ede2d63048eef1d05c9593305f9dc79fbb687a568f8"}, {0xf8, 0xff, 0xfffffff7, "ae6dc3799e7a72797c239aa40566daaa6b147f5116cf1a696d5c2445c1193a67b55f5aa4a0151511b5618154dfa14511325284c22e2da8c5bc623228fc132bc3ad04d9084d5576ec186574931875f1de61f099cb16e25deb03704ae35a7c782e49504d1a0e6ddb0e1cb1b9863ed8258136f5ad5efc7e38c206f6ddd98fc4fb314c7bc1cc203b93dbb2285b40618278c0bfd30629d0ff4881b4351f970eacb2aaea1156438c83c7d565aa883ff070dadff2205d120eca64f5cc7de3e203c530b43db721780f5f53e0bcc31aafd240eee46b89ae9b6da5a3ebd712b7d220c96503cc"}, {0x1010, 0x1, 0x1, "e30e04cbd5a0e3e5a3b2893aac79b9e3a75b9f659fefbc7fe05648ad3632aec51a8fbcd3e3a6b4dd206e9bf80a13dd12b1f4bf3e8f0acac52fb8f694b128af4559ab7bfd86b2f185194fe5a53568ab70731324810d5f50dcda34a28c2e4094b9c343b212de482a6ad57476f9bce58e8cb6df3175d3d1531a4890d2f1bbb96cfe21c3ef13d0d3171d6c48183ef1ab953e1d50d4038fce6435cdfa9e6de3435563f9616abb215479e5c110aaf3fcca6d2985fdadc062312297d6c53297e943c2cfd4a12d9c2d7e1bc3a2d67cbecbb9bf3203263a200654419dd9c390d47078f9f951708ec38ab1825e09504b261d86e8640301871959f3d4a79dbd0aa1b8ce5ffbd58795391cbcacc0f12c99d7f0fcec3212be5706968de0ca2ca3c60b439115c3b17db736e9c1b691638e8d2eadcc6d7fc60ffa36eb2223c9e0c030f39e973dc24666fc25b5ff5cc1bc0807d4c1152c3d3477b04557bab8ea62934b9c2cdad0a3d2bc50bfbb21bd5134501651faf2b9333336bd2f3578ed30d0b01fe20e3c36a55cd0489ed1f816153482f78850155d0c1336d4a4745228f7bfb1594b90766ec46bc6169065c2f76148f9be4b72bc4ca2b8704e822196e8925bb2ef0ce49696830ce2e9b130ac157c144ff37ce7375ed13cb0af494de704599bc858b3b47818bbb03be84016e32dd061d5f5dc5032451934e44c40ece5f2e4e181100bfa23b0b8644c823c4f798ae3534f67f4b20f11ec7f9c5dfbe3a4fc9d31cc0c8cf74e0ffbfc76b324847a6fe3905c5803c2640a2423045e73f9037188d15273f9b85b67db2469fad148a2f4439345c4fd0ab2cfd05864dffefb5fbf8e2aa2c387b58cde104c384386e63ba05b9debcdf715e6be77ff7122efaf78a09ea77cfd4d83a8b7d4c3f009a1d5ea550e9e6ca929f6ec4ee79a1c0ed7a99cbe46ce2a16a9b1ff5ab6b88f345b5765d84247a4568fb33ce7e1d78f4823f0b59ed296eb86ec8c077510e56b822ccb4b01be06d2acabf173224d623d58bc8284c75d0de740af3554357f942bc4801d650470a1b406495e4ab6350c853e780e7b19facaff42d920a5953e7a9e9f6e9565cbb3f48c750dd6674c36b6110de46d711060a986e7513875dee68eac398a79ff679f74ae8ad745b78012213697ba78c51849a72031c87cbc5e5b95b1c7e8257b627ad91d79907fa0bf6bdcac8354c41d4a91009de77ccb6aaea558ee9efbbba820b1bbc479b383a2bef1cea33fd914c605ccff63f611892aa96ff5b6a70bb16509042d35abaa19f1277ee4bd27f4c3f8b335cfce5f47c134ae944e9641c4d7065e7a4ed5ffd8bfdd3d8e2e68d48c150f503ad59240836983e0b99e274f0444ad06d322ad3c80df463aa946a39ab8a4b87cd16e25b4bbe828187f1eabdc2ab5999afbe0056f90c4926049b668d038d3455cc421fbff97bfcc0e22fc2315a43a06dc61f3884bb5956c474eaec921c1047df72666e49859a36cea59189fc23d9183ee24b09c02cf8896461a963df586717d580367cc613f505d73314e0a76ad9da596791e9dfd81fbc1d5923fe2f2b3cd175f43fcea2873b4305924b85fe8d2cd4f019ee068929a8cdd572d42b5ea82a0b745527dc7507101929eba6882c8c45483aa95295767b976934fcc745329a10f22eedb56a02e630681cc4ce7df8e6f97b83c467b93cc6afa900507f92e953c249794891c125cb5659dee89c771efbbc7b56bed26a38a556928fbdf2bc017fe7ce54cae501ffabf28971afd9a50456fa2fac71a3d174eaba73610b39b2c8386c673df6826f7ae208f1e4918d8eac4279eab87a369788ab2d3a6aee6b144460659d8d8734d7a75d8bc0b7d2db931f5ed0d053cfef8139089ccc6b94d97715c45c259e0fb0cf04b3723be16db465abd12ec76eefab76e16bf89079380b68d828528b7a0607961761d2690005031df50881999cb54cf71f7ffda01660f35c5445643deafaa24c8b9ca0f6ac3e5d97b3f63810756b900089f962982a5bff1ff3c408a6ccd52b65a20e375d5eee47e3c3c4f1c729dc8f8d031ad04c6eda9f86b33538de1493de4621097d5a8365df5972950e444484f4d96c6e057238fbd2d064a0382cd816a511cb513801397f095d3ccc86385ea79e3fcca14b04f15febbc1440968552f96e99d5f0fe056cb5e49dcf15a8c25ee2e3d25d06efeccad7781ad76d936efe65d36a9fbf435b3604c0d01488bb360acfb2089fa541ef6b4c4d153e99aa589d7aa23adce78b2e445d7f8739b11df5c54c1007b8110ca8407cc4416939158483a0ff6b605d58c982990a3cc31bc8c051994e9c5160b8a6edeaf1953a0550611bf313868cb9b6bc55a7faef803d5d9320360462797426156855923cf02b1e1da0abe866148f0f49cb3f3ca67acdae620e6ecefb3db1ba44b672ec671f00a667cb699b22144e5de5eeaa509e03d01a28e7f2aa576fd9c742dd67813df1ac9082a97c6179e07c873f5ddf73ff6cb9f872d63aac2b8d62ba6cfe00c44bf74dceb5260411a1160d0957d9cfdde4931dcc1a49cab29b60859a0e55dc58cdf1815f220af0a409ada350cec5674e871693e8ea1dd0d00c0ff651c30938b0d25ffc471000efc1a1a4822eb38f44f1416c38b946da415c1725875afc298e1047bfa6284bfc47bb8af9c102f139de0b7083d323ddfeca3888168d97c3a7edbd5e9d28a956478660e5f9dd217089b98e00f40ad5b420fb744c9f197622512f1f00a3ec52fba2d0f50925fba017731ccb4e1e2ee27cfd5c22c9c21d2f7881c6a804cedd5918681604d65d101aca49c990d17f909a331d1860baa201ee6446d1f6b4d3681df5238a4f25f410c073712aff353439bd15fe397cfb735304a18b5cff67c36550c547f1904e29c4c0095b45e48800e904e881a59114bbf649683269568119dbebd0ae2810e3a4dde02d743525db630fd5a3b70fca1077b32589baa847b3374eb0b100c2f29b5d48079b421285edaed634a5b79f1f8e52ff8720137af10591f2be1c4038eb3208238cb7a20e1bdf6d6868773ed02a1881d9adddc8b1e8d2ee17322233d224d84759e8ddc878cdc1d7586ea415f98ef08b4bcc9cccc6cecc9a9e63733ec33641341a37ca8fd0a658b1c1d21847b2e8ad1a3293e084475e248723a3762dfcb783272ad6a2019c036b20979daaa1b6a2564715c6f8b54b5edae6cff1b626309eed6458ce340c31c186e2310b3e2b27fcc89a2a3628d91367ff6042476dc1d6af918a729cdfe0c7f37a3571d75f2416fcde0fe419768c47bcf388a750d0421cd7a55309dc380292f75a612404d3d3588f70bd6c20bd84f563177803827f101879ba8cfee283693ea7a46d3fc186ebacee700e17b5059c165e8d3b6d8b6ab9c930358b5c5750efe16f94235e1cf7d702d44bc7a231e293fadc1d60cc8a6367d2e9d7bbe2a873451748ff66c7015ff303de34cea92cf206894b1dce2e686f93e7ab3372a9ff4be1be083af543e53db48aea6bd89f066148901865feda1dde6ff33dd27e2d23ddbe9fb7d207baf1a2305674ce10beee8e9fbeeaa093d9ede531029cac33789640b2334c52d5cc7412b1aa8d2df6ea8b1f632b427573352cae1f103122b43a31a9459461761e42cf44b9f4a061aea9eb2ea698dcc2479e8a3f6528fd59ee2abe53302d192c9422da7de8a2d779b7416e130a0947dac27f29285e227e73917defa1e8743a9751252980b89d13ed0d91a07dd058a66b19bdf519888bfb1844ce21004b709e5f7630461d004aedfc2bd4c489ca366279601f3ebb1ff7e67919a7cfa617b9c64f1d3660417331f3518ae16c632b9cca804e27880212e5af3b7cd6347f049c76e9f3f2d4100eb3760e3309da02c6e2c39a2da36035769fccf28f5556a86f646f85de67514cae8a0bcfbc2c0aec9fa76295f949ed3574653ecc28098cb6f75d80c1f8f28e03eec00327e80015530780ffd6e1493fa2e5f7ebc1483eb50ae01983f447454d6450f7cd5b55582ac5e0a3c8f899c1b8ed316177c78c755bfcbaa9f3fd59e5493bf6178f347fa51363ae9ef80ffc85d900be87804bd275857a54db902a0bddbd44504aeb18adc7a6b8c540739ae99892fb57582e9e5faa718135d3c2ebdce11d1920755a0afc5e44bd58087426f6c7109839e7f030f5f80cd71cc190c3ad74e302139f6893e54a55449b7ad13e529fb58059ecfc80506d64d591c33137b00fae73bf0165bd5321dbc0856319a2578f5d8de94ee9016a8a6ab9f42676e6f83aab47385aeb8494c137eaa34b71c04268dab92f9851c7a254af4ff3d8a6d96cfa99e049529a0d65550b9340427b4ee0616211fb89f385d1e74c07011fbbf52ad686f43dc053b4504e9ffd9b087f82de5513ad679eca4b787935d955a885c0b38b73e943b63f98767b03ebbb954a97c747ca7a4e82b3c2bd05e5d5a6eae1ddcc60a89aab3bb587265d84e8a5a751036f287bcc64817daf52ef70fc5d36b681dda8ed4ceff7b9cd384ac9181a02a61a7a672072421dcf4825bab174da61350849d144f94b0151a782641b16d0649c6342c69d312492130a11d4ec3dc8c61222637c206e1d7dc9fa11f0eb452e382e4af5a51926ffba19ba7b7432274123b28fe29d9c6dd8c73b04d62f0424f056afe6f626f5cb3f1ec4053c64675fa4799a8f06b2aa4dfb12f9dca91eb7cadcce68e500e4fcbcc5e89e06d3a9d4002fb72c6f41c47160c56188268fabfa12e9c4a9e9a88b1bfd940ac2e319a6f70f620a8e5dea2f91c237635e86677355c580c83e7f0a90b0e84e728257a20321fb493c57438a454ba93a41ba9bc2d258fd56a6b1d3270c138e8296fcfdc5eb68750239ab9858ac9cccc431dcc2f77da56190262f404386862eae67cf4642943773c21e0fffffb3a31699d1523efd391e5003d271219e22e1f370db4d342d07ee7ff2608e9831001afd8c1faac0c1c89da17e3c60fbcaf66777b63c0c299493721128f1140b3c02ce49ac59b51608b0218a2fc55ab956f335c645d908210ce2f620f6912a5d5bd929196aa7b2b94f81a902da75b7ed2ebc33042ae7934a4a1de4598e1e0618f4af58bbbe3ba5e138af6a6963495973ee9f426aafae62e2b0ea65ee4950bb922453c244487f8f57a45191aa5ad3dac0b6b4e8c16a892b00db06c359ae27a1ab79a470fa4ae87fe7bcad96623dc47b47a4fc6747333dc78c831ed95a0d029becb9adf0515ed64b5d4c65e9037d71bc79fd7c59f46b8e7d553c2d570b0a15e6e2dbb77fc9e4ddf045b1468fe3091ca5d737ca2de1a94da40f34e31eb53af5b03d9236bd8d3f36627391a1f084175373edc0bccc7f8ef9befda042b4fad834be3ea4b843477f700944646dab9c23cf1b8e625c8500576ba1dac0ba350bfb64dd949a9bfc80c7a7808a951809d68583047d23f91a5dab8da1c49e2bcf61d8eca82b694f1a4071f4e1b53b25631281ac68fbbe1dd65865d7e621557ac6bb8d25d94c117b0d2b21eaa34911c51f6644f947a1b91a1ef1631c74cbbc1ba13613e562d1836102e3d45465d41f92c1a028071ca280766146e2d8ff538180bdc6296a33bd0c265d2ca8cb6457287d31b32eb6fc3467c5ab845c11b9650443754b0e0bdfa6a99f3e8157ba04d4c891f2d7c34894f1838cafce4c67359248e331c92f5050301c8363683353e966d19dd0655bfcd8e739a5c530143c24286efa26f2bdb2ebcc9a5d7980a16bcca67b45a45511078501c52ad6e1bf4eb64bd8abd17dba33cf1b4205631ee1a9aa9f13df1a48de6c866bb77c9f7d5c14ebad8273980c47142"}, {0x1010, 0x107, 0x10000, "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"}, {0x80, 0x117, 0x8a, "463ce2846d21b17753f5d3ef5f2dd88661ab9bf820dbdea2867557f35ae95e141a0e9d9485cf1e8ca58805763281d9e7b3fde31068b0c9b94f9be54fd586bd5c53270a46b6cc2144555a5ca519c2f239b19eabbabb939de00431f18a25b957fed69550484b75761b7362"}, {0xa0, 0x13e, 0x3, "006de50aaf5ba51a12ed3e4aa61977cd02a64aeb48e9bc664a6c1d30550f9e12d060047ce809536dabe736072c87746e76c74533bdebf683e61dc5b79a361e81d6d029679d49547671002f58bcefdfbea870d041547b51c79d730f3dde8848aa31a8d77ffd302567e7bfcc597db1a208b8e0a70bcfd6d0cd934277ac16087a4a5f2049c8c0268ec59ab895"}, {0xb8, 0x115, 0x80000000, "8b03e7f93927b14e3aad4dac4575d383cf1ba15329e3c614f7c0cc9b87389d060b1cf9f6bfef64420469b31dc4671e6fc3cce4a43cc5b8a3446045af5f9b8432b26917affd5265160467f96ec4bfb8f0636ab1cfe552a1bba17b631f63dd5c0cff936f4f540beb32c6c2b4c7848b59133aa129a352b168763b8700f1f42813fda7967efcb1ca9a8e658d8cffc55f3b6cdf69b67f37ceaf18580366f6ccba4e812f8efd"}, {0x38, 0xff, 0xfe59, "107c909ef3b9cb4a10c8792d6bb90c6a3a2f914a485c50de03b8c9026fcd0d7dbcb9f9b5cbba"}, {0x98, 0x0, 0x8, "2e37f3265fe2889a0f284ecac6fcf753b15c376cccb5d53bee42be310b0049421d9d3e5f79ecd011a86b5c49a6f57af60944c03732ac1f4c40c727cb09e604f49583ef98afcfadb95849d991e70e21c6a2f960886067c03082779d3524a779ae0ae91535157a9cdafdc6d22ac9e1c11536d7396175a55ae9f3c727464b20638c5c8a8cae87d81612"}], 0x2480}, 0x20)

03:37:37 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:37 executing program 3:
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, r0, 0x0)
perf_event_open(&(0x7f0000000940)={0x5, 0x80, 0x0, 0x3f, 0x0, 0x20, 0x0, 0x4, 0x1c11, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x4, 0x4}, 0x10, 0x8, 0x5, 0x1, 0x1, 0x5c89, 0x401, 0x0, 0x4, 0x0, 0x5}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x1)
read(r1, &(0x7f0000001180)=""/192, 0xc0)
ptrace$setregs(0xd, 0xffffffffffffffff, 0x3f, &(0x7f0000000840)="22bfc000f846e9d0b806827f11c35d482a1fb29fb20f8bbd7af3bded2fb49d587dce52d6361e7932aa78e6eee3a6caac00d9dab62bbb5a0eb68d39bce62c0263236cc68e12be7e717c06553f85dab5c68d1c51bee6779ba843e5013b2ee17a99a43b05f6f0e2ec71cf747cd4975fc1715a5c2d47897ff0810323ffa645ad368123cf9eb061ab970ae9cf1881909e6fb979ad4b1cb3522d93f8e1cccc8104997b6ef5a7233e2c3a1b569af2586e278ffc870a8dedd2199613160bdbf59b08fec823d573fa07fac5632ab2bea301d1ac5e0e7b409fcc57eb10d9924c0d57e2286e3fc270155e9e02bd49f9ea1e5fa7b80d3a55b96f5194")
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc)
write$binfmt_misc(r2, &(0x7f0000000200)={'syz0', "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"}, 0xff)
write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x7f, 0x1, 0x82, 0x3, @time={0x1, 0x67}, {0x7f, 0x7f}, {0x7f, 0x8}, @ext={0xfc, &(0x7f0000000300)="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"}}, {0x8, 0x4, 0x6, 0x2, @tick=0x3bda, {0x1f, 0x2}, {0x80, 0x3f}, @addr={0x0, 0xc9}}, {0x20, 0x2, 0x0, 0xf8, @tick=0x4, {0xb1, 0x3}, {0x6, 0x6}, @raw8={"0a04cfbd18e404e21c73cf68"}}, {0x7, 0x4, 0x3f, 0x80, @tick=0xffffffff, {0xbb, 0x4}, {0x4, 0x9}, @connect={{0xe4, 0xff}, {0x1, 0x1}}}], 0x70)
r3 = socket(0x10, 0x4, 0x1)
recvmsg(r2, &(0x7f0000000800)={&(0x7f0000000180)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000780)=[{&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000400)=""/186, 0xba}, {&(0x7f00000004c0)=""/131, 0x83}, {&(0x7f0000000580)=""/238, 0xee}, {&(0x7f0000000680)=""/229, 0xe5}], 0x6, &(0x7f0000000100)=""/6, 0x6}, 0x10103)
write(r3, &(0x7f0000000140)="2400000052001f0014f9f407000904000a00071004000100feffffff0800000000000000", 0x24)

[ 1524.317810][ T3712] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1524.355397][ T3712] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'.
03:37:37 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x11)

[ 1524.437806][ T3719] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1524.446156][ T3719] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:37:37 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1524.884736][ T3735] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1524.893153][ T3735] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:37:37 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc)
r1 = syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f00000002c0)='./file0\x00', 0x2, 0x4, &(0x7f0000000500)=[{&(0x7f0000000300)="bc5a83a0f8eacdd41cf364cf6aff20b03da6a391a8847fbe66ff1ce541e3836758759bfa8fbbfc2bb554900bd57038a4e13acc1e4335d38c82f64ec67711dbb5319b9fe44e2bdb6361ff35bb87f86c5b36b28013d1cb3e6749c46ff76d4e6dcbbc330b0d42c9d1950c4bba8f37458efae1a85de348fa8a9b992a6c463e3d465e4d5ccdfd", 0x84, 0x4}, {&(0x7f00000003c0)="bf6179ba5467dea5140c374c36c4629e8fd29c35fdc3cfd24db4d90b7339ac023bac02ce3a4599176f064fe485a5ed0519c783d9a396a0eefd928a4745a3f339d479cf62b8066ab567814bdc4ed9f93cffb6308339e5e27e00b20026ca5a5a08db4b5efce08d110ee1772d3198c8b52c0e459383916c89fd2d5d2931c4eebb7e988839c923a653e8ccf82b6c6131ad0bbf9ddf7328df8e1816d9b92348672349ac0239fceba5462f9e0771f73954ce", 0xaf, 0x1}, {&(0x7f0000000480)="5c57997575226401a43af18bc67aee4951f3c3ef7fc9d42afe6b0f333cd371318b271197f179", 0x26, 0x1}, {&(0x7f00000004c0)="d817", 0x2, 0x5}], 0x10, &(0x7f0000000580)={[{@abort}], [{@dont_appraise}]})
r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x4000, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
r3 = creat(&(0x7f0000000d40)='./file0/file0\x00', 0x6a)
setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000d80)="837ccca030ebf689b95f17039501e998cb2f1077bc76bc42561082a9739cefc3c3ab80847e98b3269f99da8147caeb6f524c4fbf6711bb6c16addadc6b0796022bf3fb6356b4be5cbbc272eb864d60fc8001ece751d4d3944b32db6378631db0a260a219709f484593062bc03d1c61070d228d467f5143f58cc02f9f63f280072ea56aa70a8400b6102828a9fec7e290f88dcbfaee4361a26d822dfa447dcf2dd125f1d240c177cb65c5a83a1bd43cbdd61985ab", 0xb4)
preadv(r2, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000140)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x9}], 0x1)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000040)=0x2, 0x4)
pipe(&(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r7 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000005c0))
write$binfmt_elf64(r7, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0xd7, 0x3, 0x1, 0x12, 0x2, 0x2, 0x3e, 0xffffffff, 0x3d7, 0x40, 0x44, 0x8000, 0x6, 0x38, 0x1, 0x1, 0x80, 0x2aef}, [{0x3, 0x1, 0x4, 0x8, 0x18e4, 0x100000001}, {0x2, 0x81, 0x45, 0x9, 0x4, 0xffffffffffffffc1, 0x0, 0x8}], "a774dd89eaf7ef804606d6f3c3d12c8f75cb38204b3649cdf1ecadbc53e6c78eced50f54ed1117d41ccf9517b0df4c54e65fce436a318dd7b4d05ed62eda6272071fe7db592827fe3db07d34d8dd0dd960a8d75e066d734eccec4cd9afddfff763c65782cad82ea3276b42753aea6863a0faa7e9b02c1031f9912524f8682eec7afb5b7270fa0357e6f938f0a1260c55deb6d14ade5ee13045a90fc06df824926a988c294694700ecae370853401716e66aa88afa40e9fe70f3f119ffb0f8066ebb7b8caf6cf8f8311c5d8e3bfa1a340383ec6932263", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x686)
name_to_handle_at(r6, &(0x7f0000000100)='./file0\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB="0c0000000100000600000000000000000000006968ad3e22a3ac72151590dd283a5e064d90f59ecee88b83c9aa3ead5949d82ebf8f259f6bd5e82ed439188a6e78ce222835fc97377e46f8a80a4a5d8dd1b1a24958fba690222a56168d934fcecbe395ddc994a4d5dc1fdb68181bbac65950e77a79adba9a00cb856ea6ea71c669f713030cba89951db154bf78bffc7569aa4016eaef3d0bd080254ad60c9a0ec6d2e51ca467b18ec49c2133aac226954d6b984bf809ca88a140"], &(0x7f0000000240), 0x1400)
writev(r4, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1)
getsockopt$inet_buf(r5, 0x0, 0x9, &(0x7f0000000cc0)=""/17, &(0x7f0000000d00)=0x11)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
close(r0)

03:37:37 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x540c, &(0x7f0000000000)=0x13)

03:37:37 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semtimedop(r1, &(0x7f00000000c0)=[{0x4, 0x5}, {0x1, 0x1, 0x1800}, {0x2, 0xfffa, 0x800}, {0x3, 0x9, 0x1800}, {0x3, 0x5, 0x1800}, {0x1, 0xffcc}, {0x4, 0x8}], 0x7, &(0x7f0000000100)={0x77359400})
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r0, &(0x7f0000000140)=[{0x4, 0x6, 0x1000}], 0x1)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}, {0x1, 0x23b, 0x3800}, {0x3, 0xff00, 0x1800}, {0x2, 0x7fff, 0x1000}, {0x1, 0x9, 0x1800}, {0x1, 0x80, 0x800}], 0x6)
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:37:37 executing program 3:
set_mempolicy(0x1, &(0x7f0000000100)=0xfffffffffffffff9, 0x79)
r0 = socket(0x11, 0x800000003, 0x0)
set_mempolicy(0x4000, &(0x7f0000000180)=0x100000001, 0xa9ed)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @link_local}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @dev}, 0x10)

[ 1525.295256][ T3750] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
03:37:38 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:38 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$netlink(0x10, 0x3, 0x13)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newspdinfo={0x24, 0x24, 0x1, 0xfffffffc, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH, @XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xea}}]}, 0xffffffffffffffe6}}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

[ 1525.448689][ T3763] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1525.457186][ T3763] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
[ 1525.501674][ T3767] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
03:37:38 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x12)

03:37:38 executing program 3:
mkdir(0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000280)='\xfaIh\x05\x00K\x99F\x16\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_{T\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfbK\'\x06\r\xf8\x96\"\xe3\xd5\xc2\x818\x1f\xbf\x8c&`A-T\xbb)\x12\xbf\xfa\xc6\xefe\tM\xe6\xe5\xe9[\xdd\x90J\x18\xaa\x91$\x02\xf8\xcb\xa3\xfatw\xb9\x00\xdfA\xa5\x9d\tk\x16\x16T\x8c\x18\xb4\xb0\x7f\x8a:\xbb\x97M+\xbc5\f\xf8\xc0>\x9e\x11\x00'/140, 0x0)
set_mempolicy(0x1, &(0x7f0000000000)=0x3, 0x9)
statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/138)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x4040095)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x2)
sendmsg(r2, &(0x7f0000002880)={&(0x7f0000000200)=@l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x4}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000340)="c3d7b34aed2fd40319d66251c2daa3c9ac0f692712c2569ed73912dde8af6591752551c4aa05261099f572", 0x2b}, {&(0x7f00000003c0)="8b74a5d37bbab1ebeb0155e6865cecfa7c913a04ce9ea0442b2b362dbee05087ff159b46e7f495676fe53891e35a386bfe4c64e16c1e6f94f08ca118156a604e5fae4a2589366d7034728fc67be6c32c4407b8dfef0074fcc1924a377886074d4041e4a739e9694b26c292507b8206a9b40d17a59ce7ce345f720f122a077324181bc9802044304a0b86db75468660f973b0e65daf058354fce4d9318a12e12d50c1f11c2c4fcf8bfd6e81a146f6cdc83c", 0xb1}, {&(0x7f0000000480)="0a13e38480fe30235e31def6ed44a6b9393a8dfe2da0", 0x16}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f0000002980)="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", 0x105}, {&(0x7f0000001540)="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", 0x1000}], 0x6, &(0x7f00000025c0)=[{0x28, 0x117, 0x9, "0249aa784bf2499877b1c5555655e3f34bf2a1b39f6dc0"}, {0x20, 0x116, 0xffff, "84279f7d98f5b207aa3e6a43adbd91"}, {0xe0, 0x10c, 0xfffffffe, "aa88b3c897dba15157490d155f8f5ab7e27b7ad3216d17bbb136c10898993fc571e8cc57335811c4c48644bcd2dd027d97fbf416e3c063268b90ff5aebac07469dc1100f385df69163a2cc136f4b5119f6a08e7751a00e2c76f6aba6316b5f9439f8bc22c507847be7b593477dedd0db1ac7d0b3235a5226d02f63eac9283266e6e3505e06b4fe318e616dd9dbe96e274ac4ade5de647fdbfb072b824003c22f48867d0a09d42df81dd9eeabda1072dbe7d4b2e43936e6065328d529211868d952d393a9adeb901cae2803eb"}, {0xb8, 0x88, 0x9, "106cc2e89af8d9adf91bd074f38f8f03ef3a4a351a332238873350780448c9ba4658b5bef64431f26dcafaa3a30ac2bdca1a8461771d4982d4a3fbd2fccb6521e8de31045982fbcabcad24f7747938cb9feb04acbcbb6b4cf25bb1b7d2599bf8598a2b6930800b7439fbdbf5a14027ba3bbf95814adae89fc053aff16e6d43ad5631a89a528a7bf003759eb71f91bcc766801b5bd911462c13f280664ec9813ccea16dd94a5eea"}, {0xd8, 0x0, 0x81, "3c0c3040c6a67b546473811da71c685a9ef8b9f30a5124ed651855b898264f1269769c4a0209342d60015428b231a53d4b2adb0c1ebc812ba4d01e686c9547568aa8fa6cf55283d550889dde8a6e1f20e6fd74cfe7a3e59a50c16ff51da8750339a2f991fb576b4d0b37cd948618bb9afeff4389f5fbef3cf42edd83240e79a26c2701fc7fa3fdb129cf00d2dac014c4fdad6966e1f98569502951ae586cdb80e4a3c742a88446d3900bd74601153bfb5022d53f9253a55b28caac3881a8f808cc7fe288"}], 0x2b8}, 0x20000040)
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000028c0)={0x0, {}, 0x0, {}, 0x96d, 0x5, 0x3, 0xc, "2193019327b2961d3cedad0216ebda95ba188b194ac497f7dc470c443d6473acdf1338800a26b16704442348c47bdc69f5c7c49c45be10a707aa96422dea82c7", "195ad092a8c8ddf9d648fb58f479ba926676b97571229e5b396625af8f51dcbb", [0x6, 0x8000]})
preadv(r2, 0x0, 0x0, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
fallocate(r0, 0x11, 0x0, 0x100007e00)

03:37:38 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0xd931d3864d39dc7a)
write$binfmt_elf32(r0, &(0x7f00000022c0)=ANY=[@ANYBLOB="7f454c4600010480200000000000000002000600ff070000090000000000000080f1ff00020000000200200001003228ff0181000000006ce72e450003000081000000000000000081"], 0x1578)
close(r0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

03:37:38 executing program 3:
io_setup(0xfe, &(0x7f0000000000)=<r0=>0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x30}])
io_destroy(r0)
shutdown(r1, 0x0)
io_destroy(r0)

03:37:38 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1525.918848][ T3787] process 'syzkaller-testdir356064102/syzkaller.6TlRTI/4214/file0' started with executable stack
03:37:38 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xf)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
[ 1526.017618][ T3797] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1526.026085][ T3797] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
sendmsg$netlink(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)={0x2e8, 0x1b, 0x20, 0x70bd25, 0x25dfdbfb, "", [@nested={0x68, 0x4f, 0x0, 0x1, [@generic="131c0902026f7eff7613903ca73617e6816ca579d800a581bc6af562509f7aefd94bc7778ad86a287a8c077cf30a6f4161d1b62c35b5c806166384fa5f38ee02c625720ffc1ccdea4681720c1a71bda9", @typed={0x14, 0x8c, 0x0, 0x0, @ipv6=@empty}]}, @nested={0x26a, 0x67, 0x0, 0x1, [@typed={0x102, 0x2f, 0x0, 0x0, @binary="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"}, @generic="e2624f5d19dd62da3de51442aaef83edcf86e53fd7dd0566c7b49c4d665b60b3984bae89c6bc648ee48e8e3ff14312e98b97575835484aa99685598d6e7ae78e53a335d052f525118d64cc0aa53ac86d1b7ec626845118b1d2a8d6372d6577dc1f47a6f17853fd3e0a572976e47ccff7e4a2602b416e009593142d3d1f3a58c262717357534faf72300a08d7", @generic="48560b607d9426edfbbd5ee782a53b3f38fa65361382246e9e3bd80f5f42081e2b0bcbfb2f749c32b016e5276850547cea7f24683a4644f6bc509fbc4f11e8b6aa7aed3326ca63c2796a58f702d8fe869ace6a05070c3a08da94ea9721835ada531ccbbb155dfb42c588d7cdc228a0bcc8e59703199717", @generic="9293b2fbcb2ab809d56cbf9e7bae1807739add49c05207e82ebfd4419d037876c4d06a37acddd3c0b2bc6c3313b7febd49641f54fac4f20a2c73a857321f906f4417d5de40628efed3b3335b662c57996562089c20af108287082662699a51"]}, @typed={0x4, 0xf}]}, 0x2e8}, {&(0x7f0000000740)={0x26ac, 0x21, 0x20, 0x70bd29, 0x25dfdbfe, "", [@nested={0x2e8, 0x25, 0x0, 0x1, [@typed={0x8, 0x2b, 0x0, 0x0, @fd=r0}, @typed={0xfa, 0x6d, 0x0, 0x0, @binary="67d69a7f85671e7f64d36b9a0b9598e070d43d97ff674e9bf1c5c7ed9d814a2b4bba8be28c0f4d9d09b7862fd7d0b410fc1884d8ba971baebc81928d2f7658bdb2117a17a90f78099786ecfe45061238a97b059ede66309854fac10d0190b0a9c3dc5a65d540ad9869650ad2a8e61e5058ebe5c0122eeba01848b431fb8b0159be2a36415322b6cbdbef4771267d0b56a9d4b1bb191a274bb81768738fcc45f04e30cd10bd406a3cada80df81f0d7f9667c6df0467cf61052e0fdaf5d026a02ec2ca483ea1b28bb88079127a9cf5280fa9f6fb03bb56111abcc8b72c59430464a3d95ca3cd1c6b364b807e3ca295b75bd5b96a860b79"}, @generic="0671d8ea1306e68adabafa218e918b9b69e3bb9557921808", @generic="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", @typed={0x8, 0x80, 0x0, 0x0, @u32=0x7}, @generic="84167e367a5e13a757b43b0114026f316b19f10d31a6a3492741f46b3bc1bc1645a6a64566361af17b117ce0887eec169a10beee9cddb6b0729f52e9fa53620c7e69d989319c9ae2d61310f50adf7bc2b1e336a9951c91a92b0dd7565967cb34cd76ecb4bd179c15da0c53b1a1db38b3b7e59c7f58c9c7fb84640c5ade8feb3240fc214114859d5dee40280c1f6061492f4a3cceb3a07814c34ef199f8b774a4886d6fb243e25c99b46a774e983bfc19abf3805d6e8aca4211d3fda57d2170517eac6b4bc4"]}, @generic="aa29350d674849977e6d9a0436c4d5d79107e5e6f10439626379a64c3bac6b497f05420184a282623837cd82f082c01846e5b5d3e5bdbdbb2cae5540b88d60f1df4f5615be1b96303afe328b6deb5b18deda71a53d4ed64f3d8eafe246dfdf9cca25a647c890ab249af54e4e216354fc90e76f09c6d094324c8028791f942e35aa7c125ce328799b862b23438db0cf1e64bd316cc234493bda72b6a8f58e0363641fa8199bbc9b22703f1ad80a25a5269ac13c857f0c8bd95b9b1c6572570687c43d65a6368d655a5241ebc6188d7476c9efe1aaf7e4e71a9173bf4a3bbfceecce839f759c", @typed={0x8, 0x30, 0x0, 0x0, @ipv4=@empty}, @nested={0xf0, 0x19, 0x0, 0x1, [@typed={0x8, 0x74, 0x0, 0x0, @ipv4=@multicast2}, @generic="edee406d95fe270ac20276ea81cea27e9af0349fd62da6c84c1739ed6a739762a2189fbb0cbf0964e7a838d27f53559569130375e312c9842d92d8cc7d637f478db675329d843709e2ec63cca5291b542e3331b50f34746204a8e891aa4dcef8f71effc6427968249ad3172815aa6e0be86e69252b793bca7cc975129cc0b101ca8790bc7fd7e0f9a7b016e53fcb9a42ebd032662d63d8dc26576d801600cf37836f9f25dcbf5e4263e189a75a0c541ca286ae19ad521f90ca79763951cdd812aaf08118a072259f67ef8befdccd9d2c9e6a81a86ba35bda1a90afad0468754997254636"]}, @nested={0xe4, 0x17, 0x0, 0x1, [@generic="13aaa4ee22815f361e3a9d147ea2643893f18c6b4f8a873a3b7f0cfa0ea0cfde2e724691b617629592f17033e9ec137bb61337fe5b1c4a042801daf1b1dbb7266bfde445", @generic="c26528930e9125e5359076f079563ddd72edca2d37dfaa4004cc80a0615afdd1dcedf02cbf3b169b0038aec467218fdde6fa3a42772342c8c61beb87d30be4ab062c2e232e531ef81037f886a978cb53544d12f3aad7e7d13df3762ae1af4870acb6f65acaaaa30c6bb2af2c63e61c635cdfafd34d95456da44f0a67fed7d8f67b6fa818326e1d227422b4c217fa9eb271610647556c9474839a9f3a"]}, @nested={0x10f0, 0x35, 0x0, 0x1, [@generic="f4036655faf778adfb45ef4feb90de3550284aefc5bb", @typed={0xc, 0x53, 0x0, 0x0, @u64=0xfffffffffffffff9}, @typed={0x14, 0x61, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x1004, 0x3e, 0x0, 0x0, @binary="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"}, @generic="4fe59538a55c8923c13daff47530d47e3a210064938cc4f9c2158e8059fe0c0bb721c2f6193bcaacf8db501fd21932a5273db0e79e231d1375288f8d845514e7b9413493367626bf1086bf6c52406cc1325c182002a344a85c77ccb0aa48365ad987098c7da9526b2a8af3ced67767bb7d3c9aa20732d3578c6fdc60e393a3832a954364fde4049e53dfae92200d074a0d7ca56ef0df5899ec240757d9ffb30bce257c32ace8efbb0eaa948550f64ec1ccce"]}, @generic="d7958c0793ec8e9352a5569bfeec0239fa41db000fc33aa5bdf272f5f608b5dcf74aaba524b33d7386187196faf37bebb48bfe26e9d795b1eb726c0850f21c54e6617dda65284e9f12ca57084e2ae19b784c50fe145462b40e93535603171e12e787b53ec92223dbd8d5c4e6bcd34044aafd078e8ce2c6a611422267901864b3be9a19551053ecb9f86c1227d7ce4d7d4f6cae7db8f36e1b858f5fb411ab931c204678570e39145df8848053243c2cb2ab58a5f19f6015fa7ab07ba83891b80096176ed2a77cc6797733e842a6936322a37553313973de1168a4a3d61dff518ed82d055914595fb6eaeec712cfdf539668bd2b17498ac1d037c992620b2126418495bdf20de5158cc25d6a1a44da0a791cacbde114be45846405947872ec0a35b0cd2e673e81dd376dca31b3485084e5183e35ded335ebf2281c631243f7fb2c7b705bca2fd07ee7c7994dc12f6afd3444d92eb2e674c805a67725b41102fdb5c2dfe63145157acd80bb59a58f51c245bd6cbb0d0573ac21230d272250f49e1ae4ec3a1fb5dec0164b3197cffce3bd6e0c4f129fb6eba76c85fd5290dfaf69e1eef469393e38a5bd011ac705119acf5559d03bed87e3b74f7ef8e914e0e836eec73ad9feefab6ccd1b3ca794e4033db1dbe63741ecd921edb7271a8666c4a7d94b3202d7874d5b98539d37da4c44bf61159899589a801b9113030fc9b51387af0d356dd55f80e49b5740550f0b5d8c50cb7864946974a093c85d00714d173297e8f80da075b7416f19a76a915c768a5d145e5f4e7445cbeab413392292a1e9710a20960ede8740b918a44e0ffa33b30ad710f5acc07d924ab5896c8e0b348ed5cad1e0c19e74081babfc1324a0143cf8f79ee0f5f47fbb37bff2b14fad452eb98f6912dfc043e6333994a32215ccdf53a6e31223f74b8fab89b73ae7c21838a4d08a2a77c7048bb937dc06a0bbc14be12e3ff37d8ea0ecb4515571cb1c30adb6dd0e0e0510abbe902443dfa6e8202ce0ebcfc966e1b6527d0f3ea337ad49b7fc4bf53c4794d892195ac94ef254b341f645faafbbcbf669e028b3524885e060dfa88ef0a891aedd141594573306e2c53308b2260c35757a5e4bd2e98ea1c35e22683a4a0b102fee17c6b0a0a704b03ad50c3c2a461454c9aa13bd7e8790ad05638b1ab874a8d3fcb6d97c250802e637522e3537df989f577782aa0759312075379f95020291d60a54a81fa4b06916aeaa8287b3f57fe4f86c2140748511aa49edc525051e76d1b72802f1a5f99f322b46f7c447e514ac350e4f9da6e71a11f95bc302ad42f476325645d6796952bf4d7d7dfe3c10ec900a31315c9018a3b9760ec014703892096d6c6faafa001dde756a22981c1378bdcce19d4c652f9b863b11cd25ef7e45a1cc9dafa60d9f1b6ab7c34b5d94f2323c451816ac5a2ea2bd9530ebae34eef371b36bfbefb864e25536baafe47b788b48fd5b0dffa8371b3cd08d6de2b016b8a243969af367cd91de7439099f7b36e5311ca53fe137066bac8986070e13b2946fed1c484b97cacc500f1afb257253f4c4640fbae846db1c8a9544879c0a97607c3aafb8d8ba12b7bd7040af04296c773269d2b2a891f1c89bad96a38f2828acc15412148bd1d1fc9b085e4c2574796442bc6c3c3b14389a89a335678dd3256d55654eb39dada01bcd1cd16cb8ae6dc086c0e8e0b165859ee095174e5ebfdb84f4abb62d4481312ce0b16eaca10965b74e402d5e20faa8454b9805d33477dc565ff00676416e7bfc7ad9e2f4e049e6c9d44d5554e98ecfb8540e884e76d55bf7bef67cf51d4c16efee9ec36fde2bc38ee02504c06cbbd5948f0b13c9bde98c234ad8229eeca59058481dbb5c374991cd0a1f52d43e2b141648dbc02e46e6100f784a766e8ed38bb9aca2cf80b7c9dfa8fd4f15d09a931dab2c2fb8a8eccd0401d1d87aa3111b4cbde2bd9ef6aea9400ddbdb8682a1665bd615e0d87bfa0f399b654a3083525096a20370bad3cdd63c7d756c67cf9213627e01ff937904991d4c60f995e86143161ed1dcd26b9f6d6bc5c5cce8f9baf7dec19005bc666fbb3f44cada69088562ce9b4c8a179f01533fc07d61cdf6a2c992dc76cd7793b2bf80376f76421f04199ada709290c91b1a8c888c6d3fa31c28888df6d69de4a1233e5dfc2b922cce53e08f05d18c868a86c2eb02ef27d98635efcf66fc5fd7e017beccfc4d94afbb6cd8b309fa2dabe5d16249f02b766e041c40179359eae14bb58e3399a7cef9e2dd477fce0c271ec339194d55906123c8bd76494fdd8e7eb4a5bd505c684a0588fe7672e2e6de9c2464594cff2ce5794c4836898e702b81a7c561e35071757ae96ff83a4b4fea78f731f56ab80a8a11ba58bb422c8978c8e7806aab6a92b4b2675ddfb28e1bfbb8ec588de1b170b37e2e3d60a0b416646e7537cde8ff7485c0b3cdaf9c31d1b5c08fdb3271ad9d8d1299762b6949e32da7c72aff00148f7658c773c62ee4d5199c082b23c3f3dbb37d333db4237ea6f91d9c4188e1eedb21dd51bd4456a9c74256920fe3c41ee40c449253f1c0241d1fea46660bb697b81c6b5ab762cf81d4a900e146ce0c0c2aabb5a964b2234c0ece6223c127c139f6a1b7dc7f19bbf1764eca2b327f6280effcb887b1959b8e565a9df31e30d743d1857f6fdfad64e7124d6daa77349e756129b7c05d92067df5b09c86b087a32521cbd21edda07fa64acd62ca39926b02a346b4a5fe8541150c7e305f07416db52f7818e5461268e5fb0a2f92c62868fb7f624f4684090ce246c4e786f05a5fb92c14c5997bfb425d530d1217b644a9c386f627260ea4c57c0a4cafd0c87797bbde20df622f182eda03b6fb7e04a7756d7c5e096c2af2c72d774e1e36257883bd89c314c14a5c86005011988b08064daed6d4dcd52f7ed45b662db211d254ae9f87ec91a660ef3e4b3cbc203d8526881864aebe35ed93d89df8685bbf627d3d834f4ab0cf433f23b6dcd8ea7cb04ab42f789abee0650d0f918e5af0ed69907c8e131cca0b68409b6c1adde523b50a32c66bab0bb45fae136047ea2d84694430eb0910e52399119c01aba1956de9f978ce9b90cfee5ef434d9912c1918586c2c13d19d2891ed7d544d3c2a416a785596fd175241d65b8f6245737abfd5501684d04585eb4dbcf7ebf3c0e3e84bdf3d598c9fa6600dd00489b289d4b4d77999951a3900e0961f48f014678243e0c53330a245efdb381e7144b852cc9d7be8af1207212fc6664cdd80e328303b76c40629f47007f25221ea119c64bf87cf59f006c1339687a984cbb0a51126bd8d4444014c2c998607d1ca382179e4844a3c863a178fbd7632fc1b78adb6957086e326711936cd7eed8367bdc9affa752b0491398f5056eb7c24bbb7d6d4e4edffd12dae619a57ae1efc2965b88b05234b2e6ca2ebe3d706c3162e30e70a47cc745376505a97bfba49d6bc5eabcf0dc55795aa336e70536d4f071ae5aa275c574c98bbed1b0f8925da27880caaa8d91d5f9b5098688396c12183bf767493e1243709ee8be5fafc4549e0c274e1a35d6a99d382627b5771c43dae4fabd47fec9eee69e59c3961eda5de1c605efc9297e24b2132e95f1b5ed5214b875740c3825f64a450aa916a70754a6f58bfc7a710b62bd023c0560835a16d4e634864a976d73e1402b48cb85bbd964e4948baf2c0f78605dc00df6c0cfcb52000a53cd8756288f2b2f3b776982aa124c349f0fcd5cb95ff67e3fbdc4b8ec84a09670edb47857d32513f0f642c2b1bfbf9171d0486f5bf5480cd354d2bfe0f0d3b74a275ac42a872b7850799a20df357efcb284f65072ff291faa0a5478efd89fa723a83ba8975a249daab092f34d25c16ab7305174ac1dc15490138da948d1bc3f526878dfcd36ace1703138e4b20d09720be5fc0658d7b3ada95f6e020de5b7cc3208238ca53934b51fe0b26602331e3293c009804f65b96f86ed6897f935c70ae9a26d3025ba0b83001b15d3531b0adcdcbba8257af7a2821f01756be32415b4b80aa905c95682aaf5ffc68437272d816d1385e4e50d7aa1dee8c98f1dddf3e5eb03d35a1bcb9357e45cf48441a2765b9f70876f04b3704ba15e63cfe767ea4a67220374c8f9c285b5403ce9eb0b25ba6cbcd6217df6e381373a6ecd6afe7ab9e2844c1143a0355ccf9cfd433d0da465dee86f9f77f2fadcf14c410d4090fcf9d82bdc0ecea5563aa306d2335116546c32234f9e58e06dbd92b01f4ac588e13ed8058f2171bef8a76e458e6f891b7807c812baad92b400db9fbdb1952614f007f2b052b35b903cc957154b02af79bb927932d48905ffec6bac2527875673d178e509957e49db148b108f7fc64a71b681a567344339dab3920b397737eb9f1272260acdfb9619e050e1ced5c9f9ef5b63ceedd15292f18cba607d1c1a6f2c11dac96bdd74db83674e37fdb32770d3d3d3bf0481f81c3efa3949aa4a56990a17ea67c7a67da949be29624865c876ece3d6b4e82d7631db35c7f638aa43cec14fabf4f42a4a02be123c4cbce648225f9306690e93b48191603353905cb8954d07f823663e981e931236446acefb1f8cc59bf9a588955eb52395f867cfceb7f1bcd559f69ba7718df46eb3e572d10a751a630f2074db16b9cbcbfc41057f505cd2c22f12d6e534ce2c514539de80da9511b29cf910d5b274afd6c3ab8e2aeb3f10ef4ab4eb7be32a9d972c4f1864bd17ee98a9368e319c1b2fb49eae28c897f6a118fa2e470189e6bc33d3342e2944e5012e58121126c349b789b04fc0e3bfb1bb9d6bf27a769bd7b69cab12d31e5d8d5eb5aac2fc2cea84e2fe2ba085bc5d47eebd762c44a7a217b20a446f7dad61a3d6e4961fed11755bdbdd3ad7a458ec9c919bd16dedf6dcb4762bc7bccce16aec42accf8ae90f578d5ff115164bf41626457e0a4c68af8024f954905814ae6b1ba89778aac5434b9edeb394b83ab652f9d73cbe0d1a419f114ad8d62551aac9edac19822018099e550f3b9912a2edcf753f0cf74b41c88b5c168b68f984427d04c2a1aa9eb24ed83f9b2dad96371f11c79ee9ee78f7df8b08bf42ed95dedf413fab53028a43445c40d830474b99edfdae56c6ae2857fff084b28dfa2d0db1e41ffe692bb4dbe9c58ac24be184d9544e44ecf3debad56cb700031e9f0b52606d7b4434d0307b7076783362b1c2aa39923ef633bf304146080f00037dab66d02e13d99424ba6f8e7265b9bd43cb97593c8425fcff640b833b65bcbd9c10a1ae3847f05089a2b080f8596ed698d3c73c0d8cb70c18ad0fb482becb97eed83dccd7e9f9f4828c4474ee8a5e32feeabebda88306105f1f287e8cf9c8310bfa70a19336c08c24eb734c1cc4e931117079107c0989a11dac6a2ac7b0915bf87f5ad53d527b980b8b0fc369fb9f7a1bc5b2298f74fce607e926d0e1fa65ef886c8156abe753888f670e5694ae9ea7babd5486d0fe04f549ae31b4c250bf8c15ca1c9453080155e713037eb9bc50beceff9c6e1eb6d22d8bf29a10a7f1ec0775b005a3e96ff789ecef8087d156e6d6ba2d263daf7e5a8ee9bbac5eab141f6fb1da27675170d7af6a3d71dd5127b3aea1a6640ec6cf2cc3b27bcbe9752e998cf171f4ec4e3da27e1f008adedcf2ff6d0d6d04515ff3d56c4304294c58aee619f97bf214b96c3261cf04d9ea3975acf73874849b04b6a77010d723e69c9084a2a26c8820618f77ac204c30adda68c70318b0436d4e34d2a1fa12d2400092f0a0fdee51e3fcceb6592c06bbb"]}, 0x26ac}, {&(0x7f0000000040)={0x4c, 0x2e, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@nested={0x39, 0x7b, 0x0, 0x1, [@typed={0xc, 0xa, 0x0, 0x0, @u64=0x375b}, @typed={0x4, 0x56}, @generic="4f8a128db9ecad037b9a853320962d1687cbc4e417240331f89adbcdf276b7859e", @typed={0x4, 0x94}]}]}, 0x4c}, {&(0x7f0000002e00)={0x2b4, 0x34, 0x400, 0x70bd25, 0x25dfdbfe, "", [@nested={0x18e, 0x7a, 0x0, 0x1, [@typed={0x8, 0x23, 0x0, 0x0, @u32=0xffffffff}, @generic="5acce74afc49c11a7dca3b58453af9ff1a2104ad1f949792a92af44a2bede4adc3a8055965c465dd86e49c5b4a4878c67002bdf6c1387166313ba5e8ba53e855c44aa93ca997f798984c51a6f60b3cacf062bbb4e7073bf808ea0015b5af57742f218e9191a46863f1a80ee1ca04b487b74c95bb96c37f1a9f50864b61b210f48fd08f5c5525120a8e54", @generic="80e1e25438f8c7f80bb2d74c8099de53e852a2073a0fc458a5a4a537f6a7cc18e6fb76065e31f236cb61297e63f138b0ecf00e94cf12b63ba2f385481c11fdd75823", @typed={0x82, 0x91, 0x0, 0x0, @binary="01b2d170e1e98db30e71ec2c284ad681d670ee0e2c44b12aefd83604ee03b176ebfa328b51e60b97c4e98c5b6cbbb9e8d7ce027331251591d2fb3d40bd372040b06f52b4f0a3f13ed9c09ace82ac106be0b71dba20d57f679dab4f5d34f4a532603f257059b678afaac6f02e413c0180bbe8f7a9ad8507df6fc798f89630"}, @generic="599c3d015f4b41d6ae7f5033b16120265982a260f85a9aee938aba2a15fac27e778b7a5672612333b0a6a4865a2eaedc2f95"]}, @nested={0x111, 0x50, 0x0, 0x1, [@generic="74a2c0f41249722618fc94b7a99680f0b0e94be30d498ca8a1c83e387b1f99ac5584d82458ee41ab0ba5b090363fe22e09682f59e934341940560f9ff845a8d19557cd32b1b83d5a7be22c8a3f9ad320fbf477479fbc7567c7ad7ef718048776daf029c94ff3092e9ecad1a3eda37fd0ea7f33fc50cdf329a2344b805fab7b1944c5f5151bca3083ab71f3a1910bf2c9116dc6c865fafcf6ab3ca295eccc0ba242a9bad87fe123f70e51a10a6573f23d83e8fd4ccd99c70915c639d89d862b8204796d51dcb989b375616bb0b3d736b94c7ba1eb20f4e3d380d9749b5f9e45ceea0188fbc6", @typed={0xc, 0x1c, 0x0, 0x0, @u64=0x1}, @typed={0x14, 0x5c, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x24, 0x0, 0x0, @fd=r3}]}]}, 0x2b4}], 0x4}, 0x40001)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x440, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000240)={0x1, 0x2, 0x1000, 0x1000, &(0x7f00000030c0)="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", 0x38, 0x0, &(0x7f0000000200)="c8ee8963cd36bdc63760f0bc909cc7e24cd1be452ce55d9337334554bfb2721460341daf21da0806aed4639e35b0f65d4d9f9e46366f103b"})
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x5}], {0x14}}, 0x3c}}, 0x0)

03:37:38 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x540d, &(0x7f0000000000)=0x13)

03:37:38 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000400)={r3, 0x3, 0x6, @broadcast}, 0x10)
getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000240)={@loopback, <r4=>0x0}, &(0x7f0000000280)=0x14)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, @ipx={0x4, 0x8, 0x6, "67c3e1ad9e5f", 0x4}, @xdp={0x2c, 0x1, <r5=>0x0, 0x39}, @rc={0x1f, @none, 0x4}, 0x6, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)='veth0_to_hsr\x00', 0x3ff, 0xed4, 0x1})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x124, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4004084}, 0xc5fadd2ce3ff8f4c)
sendto$inet6(r0, &(0x7f0000000000)="7800000018001f06b9409b0dffff091b0212be0402000605020003004300060002000000fac8388827a685a168d0bf46d32345653600648dcaaf6c26c20100010000000000460c0a975cc9ff3959547f509058ba86c902000000000000000400160004000a0000000000000000000000007fb4f8eca0faed", 0x78, 0x0, 0x0, 0x0)

03:37:38 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
r1 = semget(0x3, 0x0, 0x225)
semop(r1, &(0x7f00000001c0)=[{0x0, 0x8, 0x1000}, {0x4, 0x800, 0x1000}, {0x3, 0x4d8, 0x1800}, {0x3, 0xe4, 0x800}, {0x4, 0x1ff}, {0x4, 0x7210, 0x1000}, {0x4, 0x1, 0x1800}, {0x3, 0x2, 0x1000}, {0x4, 0x4, 0x800}, {0x3, 0x0, 0x1800}], 0xa)
semop(r0, &(0x7f0000000280)=[{}, {0x0, 0x7000, 0x1000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
semop(r0, &(0x7f0000000040)=[{0x4, 0x3d}, {0x3, 0x2, 0x1000}, {0x4, 0x4, 0x800}], 0x3)
r2 = semget$private(0x0, 0x8, 0x0)
r3 = semget$private(0x0, 0x4, 0x42)
semop(r3, &(0x7f0000000000)=[{0x0, 0x6, 0x1000}, {0x1, 0x2}, {0x1}], 0x3)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r1, &(0x7f0000000200)=[{0x4, 0x1, 0x1000}, {0x0, 0x5da, 0x800}, {0x0, 0x7}], 0x3)
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
r4 = semget(0x1, 0x3, 0x8)
semop(r4, &(0x7f0000000240)=[{0x4, 0xffe0, 0x1800}], 0x1)
semctl$IPC_RMID(r2, 0x0, 0x10)
semctl$GETZCNT(r2, 0x0, 0xf, &(0x7f00000000c0)=""/243)

[ 1526.396779][ T3816] netlink: 'syz-executor.3': attribute type 6 has an invalid length.
[ 1526.404905][ T3816] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[ 1526.431200][ T3824] netlink: 'syz-executor.3': attribute type 6 has an invalid length.
03:37:39 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000400)={r3, 0x3, 0x6, @broadcast}, 0x10)
getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000240)={@loopback, <r4=>0x0}, &(0x7f0000000280)=0x14)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, @ipx={0x4, 0x8, 0x6, "67c3e1ad9e5f", 0x4}, @xdp={0x2c, 0x1, <r5=>0x0, 0x39}, @rc={0x1f, @none, 0x4}, 0x6, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)='veth0_to_hsr\x00', 0x3ff, 0xed4, 0x1})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x124, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4004084}, 0xc5fadd2ce3ff8f4c)
sendto$inet6(r0, &(0x7f0000000000)="7800000018001f06b9409b0dffff091b0212be0402000605020003004300060002000000fac8388827a685a168d0bf46d32345653600648dcaaf6c26c20100010000000000460c0a975cc9ff3959547f509058ba86c902000000000000000400160004000a0000000000000000000000007fb4f8eca0faed", 0x78, 0x0, 0x0, 0x0)

[ 1526.439332][ T3824] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
03:37:39 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:39 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
bind(r0, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x2, @local}}, 0x80)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@migrate={0x50, 0x13, 0x1c69, 0x0, 0x0, {{@in=@rand_addr=0x7000000, @in6=@loopback}}}, 0x50}}, 0x0)

[ 1526.512466][ T3833] netlink: 'syz-executor.3': attribute type 6 has an invalid length.
[ 1526.520677][ T3833] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[ 1526.580385][ T3839] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1526.588845][ T3839] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:37:39 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x13)

03:37:39 executing program 3:
r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000340)="d631dd9a1673f6c912a0b3d4f26eb0339b8badacc600f30e9b8c6a973819cf4a082f35a5f1bd324f1ca9ebac01a92c263d295f29030de7ceefce2a271d5880f2523f272c1e6c238d905680d65dfcd176f38631d6b99f679bf4ad7d66b932f6083b8a07d613da6c9ff76b73d3d586e922fc026dfce5d8c31f089a3c02cfca6ede55360ea81c58a7128888b9ea690370bf9fc144ff138a18dcbcf7253c0480b3d83ceed62102b909e5316a50bf9eb44330e06856337db94e0a65d939c9b0520b98d5f4674db4ac230a497532c8e0b8cfc910", 0xd1, 0xfffffffffffffffd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
setsockopt$inet_int(r1, 0x0, 0xa, &(0x7f0000000080)=0xffff, 0x4)
keyctl$read(0xb, r0, &(0x7f00000001c0)=""/91, 0x1001)

03:37:39 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000240)={0x38, 0x3, 0x0, 0x0, 0x5, 0x0, 0x400007, 0x40000000000}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000002280)=[{{&(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f0000002380)=[{&(0x7f00000002c0)=""/105, 0x69}, {&(0x7f00000024c0)=""/4112, 0x1010}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f00000003c0)=""/121, 0x79}, {&(0x7f0000000440)=""/77, 0x4d}, {&(0x7f0000002340)=""/59, 0x3b}], 0x6, &(0x7f0000000540)=""/236, 0xec}, 0x7}, {{&(0x7f0000000640)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000880)=[{&(0x7f0000002400)=""/151, 0x97}, {&(0x7f0000000040)=""/9, 0x9}, {&(0x7f0000000940)=""/196, 0xc4}, {&(0x7f0000001940)=""/190, 0xbe}, {&(0x7f00000000c0)=""/13, 0xd}], 0x5, &(0x7f0000001a00)=""/28, 0x1c}, 0x4}, {{&(0x7f0000001a40)=@x25, 0x80, &(0x7f0000002140)=[{&(0x7f0000001ac0)=""/221, 0xdd}, {&(0x7f0000001bc0)=""/205, 0xcd}, {&(0x7f0000001cc0)=""/16, 0x10}, {&(0x7f0000001d00)=""/255, 0xff}, {&(0x7f0000001e00)=""/237, 0xed}, {&(0x7f0000001f00)=""/60, 0x3c}, {&(0x7f0000001f40)=""/36, 0x24}, {&(0x7f0000001f80)=""/241, 0xf1}, {&(0x7f0000002080)=""/104, 0x68}, {&(0x7f0000002100)=""/30, 0x1e}], 0xa, &(0x7f0000002200)=""/77, 0x4d}}], 0x3, 0x2, 0x0)
r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x80019e)
openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setreuid(0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000900))
setreuid(0x0, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
sched_setattr(r0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0xc140, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x48178000)
sched_setattr(r0, 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x401ffc000)

03:37:39 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1527.078260][ T3864] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1527.086640][ T3864] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:37:39 executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:39 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5413, &(0x7f0000000000)=0x13)

03:37:39 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f0000000040)=[{0x3, 0x1, 0x1000}, {0x2, 0x7d0, 0x1000}, {0x0, 0x5, 0x800}], 0x3)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:37:40 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00')
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
read$char_usb(r0, &(0x7f0000001440)=""/222, 0xde)

03:37:40 executing program 2:
sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="50020000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000640104801300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b00003c00078008f80100000000000800010000000000080003000000000008000300000000000800020000000000080003000000000008000300000000002c00078008000200000000000800020000000000080001000d00000008000404000000000800030000000000340007800800030000000000080002000d405fc743be1f94000000000800030000000000080004000000000008000300000000000800010000000000440007800800030000000000080003000000000008000300030000000800010000000000080004000000000008000200000000000800020000000000080001000000000024000780080002000000000008000200008000000800020000000000080001000000000034000780080004000000000008000400000000000800030000100000080004000000000008000200000000000800030000000000cc0001802c00040014000100020000000000000000000000000000001400020002000000ffffffff0000000000000000380004001400010002000000000000000000000000000000200002000a0000000000000000000000000000000000000000002000000000000d0001007564703a73797a30000000000e00010069623a64756d6d79300000003c000280080001000000000008000300000000000800020000000000080002000000000008000100120000000800020000000000080001"], 0x3}}, 0x0)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0xa, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004050}, 0x4008041)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0)
sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x248240}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000009e47be77c0b10b6855bbca15d83b8b2f9be9d40485b310c8cdca36457f2ecc28fce52f5f10d0d2112774b22fd4f3859372cd8cb82e30d2e93ea81a649280e310921ff01acab44362c643fb8d0bc247b1c109", @ANYRES16=r1, @ANYBLOB="000129bd7000fddbdf255e0000000c0099000200000078000000050019010b0000000800a000ffff0000050018012900000005001801060000000800220167000000"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c040009101a020200", 0x33a)
fsync(r0)

03:37:40 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f0000000000), 0x0)
close(r0)
r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
copy_file_range(r1, &(0x7f0000000040)=0x64c8718e, r0, &(0x7f0000000080)=0x81, 0x2, 0x0)

03:37:40 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1527.494427][ T3891] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[ 1527.502527][ T3891] netlink: 246 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1527.519413][ T3891] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[ 1527.527565][ T3891] netlink: 246 bytes leftover after parsing attributes in process `syz-executor.2'.
03:37:40 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x80000)
sendmsg$NFT_MSG_GETGEN(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000002d00010000000000000000000000ec20000000000000eddf00000100"/51], 0x40}}, 0x0)

[ 1527.628269][ T3900] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1527.636647][ T3900] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
[ 1527.667981][ T3905] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
03:37:40 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x14)

03:37:40 executing program 2:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0xe}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = getpgid(0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$unix(r1, &(0x7f00000074c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}], 0x1, 0x0)
sched_setattr(r2, &(0x7f0000000100)={0x38, 0x1, 0x12, 0x5, 0x9, 0x10000, 0x100, 0x7, 0x20, 0x4}, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000080)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000200)={'syztnl2\x00', 0x0})

03:37:40 executing program 3:
r0 = add_key$user(&(0x7f0000001040), &(0x7f0000001080)={'syz', 0x3}, &(0x7f0000001840)="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", 0x1000, 0xfffffffffffffff8)
keyctl$read(0xb, r0, &(0x7f00000010c0)=""/103, 0x67)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x108, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001440)={0x0, 0x0, 0x9})

03:37:40 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x1040c)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
sendfile(r1, r3, 0x0, 0x81)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000071})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc)
ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f00000001c0)={0x1, 0x90000, 0x2, 0x0, 0x2, [{0xfff, 0x8, 0x91, '\x00', 0x8}, {0x4, 0x6, 0x8, '\x00', 0x220c}]})
pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000001480)="c87aeac620ff43938d42d161f65cd6c7d090", 0x12}], 0x1, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x7d})
close(r2)
io_uring_enter(0xffffffffffffffff, 0x90e, 0x0, 0x0, 0x0, 0x0)

03:37:40 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1528.199793][ T3931] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1528.208190][ T3931] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:37:41 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5414, &(0x7f0000000000)=0x13)

03:37:41 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000001640)="200000000002000019000000900100000f0000003c22470fecd5aacb561c3b8400000000020000000600000000ff00000080000020000000dbf4655fdb4f0000010400000800000001000000daf4655f6f4ec335295aa7439b0000000000000000010000000000001e0b0000000004d8fa328497", 0x74, 0x400}, {&(0x7f00000000c0)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000300)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000000c0)=ANY=[])
r0 = syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1, 0x4, &(0x7f0000001480)=[{&(0x7f0000000340)="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", 0x1000, 0xcb}, {&(0x7f0000000140)="4597cfb020d4d774a15f", 0xa, 0xc19}, {&(0x7f0000001340)="b39b226cd8890eb824cae4abf1b9999b5a75340df2982081e0ce41280db4e73661cca6ccced74c808b92c49f5c6842431e7134928bb6d8e383baabe798a52cf50242affb05f6a02f847810163da9c0e59e36692feba0e01bc218cdfeaf42c0f09b163858278d6701aa0e120c533a5c7656d46b5e88f9e5fa753925b560014a04584b1106dba0085b63353cfe24022efbc4c7393ebee7a7e287494bdd2951d73040b412d720951e4896d583c30a15dd3da1ce9c4f16a337143efbe7354bc73986", 0xc0, 0x4}, {&(0x7f0000001400)="f2ec2ac804079b21d59c19d0b00fa6bc9e4d814b234b04b9fe6b0be49bccb9724d3b7530bdb201b78cf50965d5ebd63fc42cc4b6a6a043c52263533811c1db0050132e7bd5a08954cf85d4cf3b154aceb4760e3f2055c585", 0x58, 0x5}], 0x828, &(0x7f0000001500)={[{'ext4\x00'}, {'ext4\x00'}, {}], [{@uid_eq={'uid', 0x3d, 0xee00}}, {@uid_eq={'uid', 0x3d, 0xee00}}]})
unlinkat(r0, &(0x7f0000001540)='./file0\x00', 0x0)
r1 = fsopen(&(0x7f0000001580)='udf\x00', 0x1)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000001640)=ANY=[], 0xfffffecc)
fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000015c0)='uid', &(0x7f0000001600)='./file0\x00', r2)
chroot(&(0x7f00000001c0)='./file0\x00')
umount2(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x81030, 0x0)

03:37:41 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x800}, {0x0, 0xf000}, {0x2, 0x2, 0x1000}, {0x4, 0xfffa}, {0x0, 0x400, 0x800}], 0x5)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:37:41 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000180)=@alg, 0x80, 0x0, 0x700}, 0x0)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semget$private(0x0, 0x3, 0x11)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
r2 = semget(0x2, 0x0, 0x16)
semctl$SEM_INFO(r2, 0x3, 0x13, &(0x7f0000000040)=""/12)
r3 = semget$private(0x0, 0x8, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r3, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r3, 0x0, 0x10)
semctl$GETPID(r3, 0x0, 0xb, &(0x7f00000000c0)=""/172)

03:37:41 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1528.721843][ T3962] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1528.730420][ T3962] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:37:41 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
semop(r0, &(0x7f0000000040)=[{0x0, 0x2}, {0x0, 0x1f, 0x800}, {0x2, 0x7, 0x800}, {0x3, 0x6, 0x1800}, {0x3, 0x7fff, 0x1000}, {0x3, 0x200, 0x800}, {0x1, 0x1, 0x800}, {0x4, 0x491}, {0x0, 0x77, 0x800}], 0x9)

03:37:41 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x1040c)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
sendfile(r1, r3, 0x0, 0x81)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000071})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc)
ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f00000001c0)={0x1, 0x90000, 0x2, 0x0, 0x2, [{0xfff, 0x8, 0x91, '\x00', 0x8}, {0x4, 0x6, 0x8, '\x00', 0x220c}]})
pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000001480)="c87aeac620ff43938d42d161f65cd6c7d090", 0x12}], 0x1, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x7d})
close(r2)
io_uring_enter(0xffffffffffffffff, 0x90e, 0x0, 0x0, 0x0, 0x0)

03:37:41 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1529.200254][ T3978] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1529.208856][ T3978] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:37:42 executing program 2:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x800}, {0x0, 0xf000}, {0x2, 0x2, 0x1000}, {0x4, 0xfffa}, {0x0, 0x400, 0x800}], 0x5)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:37:42 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5415, &(0x7f0000000000)=0x13)

03:37:42 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
r1 = semget(0x2, 0x0, 0x8)
semctl$GETALL(r1, 0x0, 0xd, &(0x7f00000000c0)=""/173)
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:37:42 executing program 2:
set_mempolicy(0x2, &(0x7f0000000080)=0x3, 0x40)
set_mempolicy(0x8001, &(0x7f0000000100)=0x80000000, 0x1000)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x33fe0}}, 0x0)

03:37:42 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:42 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000400)={r4, 0x3, 0x6, @broadcast}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', r4, 0x4, 0x9, 0x1, 0x0, 0x22, @private0, @local, 0x8, 0x8, 0x9f7, 0x5}})
sendmmsg$inet(r0, &(0x7f0000003280)=[{{&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, 0x0}}, {{&(0x7f0000000440)={0x2, 0x4e22}, 0x10, 0x0, 0x0, &(0x7f00000016c0)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@rr={0x7, 0x3, 0x38}, @timestamp_addr={0x44, 0x4, 0x16}, @generic={0x94, 0x2}]}}}], 0x20}}], 0x2, 0x0)

[ 1529.739270][ T4009] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1529.747847][ T4009] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:37:42 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semtimedop(r0, &(0x7f0000000040)=[{0x1, 0x20, 0x1800}, {0x3, 0x6}], 0x2, &(0x7f00000000c0))
semctl$IPC_RMID(r0, 0x0, 0x10)
r1 = semget(0x0, 0x4, 0x385)
semctl$GETVAL(r1, 0x2, 0xc, &(0x7f0000000100)=""/110)

03:37:42 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xd08}}]})

03:37:42 executing program 3:
socket$inet(0x10, 0x80003, 0x0)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="b486b5d90eff8bdb56f7dedacef1f972dfd9c13d494f9b32b114588af0c49ae5c3c5d9e6b422e3dea3b2c21102e326007c549fa0f81c83d0853c1f0f001c12aad3f8d8d3fc185f1c6b66585677f62e9baad8a0e6198781c009087c18500020afe5c2f5bc8e9aba059b2d2779af02a9f007968aca0fe953844f0133f99c8f9576e21ca183973e38c324bbce925ff2978ef9293ea5a832393420b5834ac5d980121b9240c458bc42e0ac475a375d814efa017f4f76624eb24aba8f98c34a67bf629b54b467cfe823910449c7be7e1019edc44a9692c62739bc50c9db50bce9efdffb30ce63", 0xe4)
r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0)
sendmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="cd5c9e10b1a6d5f7385017f0c5b1d386d385de5b3836e8d64658a76abd89fa32ad1ca2d3cd079553618ff8120fdf0b2e942f4a00b1a2db52ae47c30a8abe36b2ddf41637cde4b8e1ab140000000000000000", 0x52}, {&(0x7f00000014c0)="e20edca02f35f338e9101fdd3abe4bdcc02f93d54bef0c606cc9d363043b31394c3f7136c4173ce58c12c8d72971e46588c7235b2fbbdd75b96c6678d279c7df3077bcbaa7e7d4b1d2a59083f98f36c33e20dfced79270c171034bc9bdc3227d6023dd05a4a7bfddea80700d127f98ba275f2481f168", 0x76}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000000040)}, {&(0x7f0000000040)="967a20eb17a67f06000000248500"/23, 0x17}, {&(0x7f00000002c0)="c413dc5ca004eb1dceea6b582c0947a487b4cb194db3e5af01000100e8cc00000000", 0x22}, {&(0x7f0000001380)="56beaea615466fbde4ec10e9238a0868f06fa9777b50553c8747d32495ff0664912d9efc2650ac6a405216b3d8ecc0346cf98694368c1cb3843053d2d4da8fda732180d80b1a492b2b892623a908b0530e61640604c8d1761c6bd6bce0b5a3031ecf71ac6e0ebb4488c0ea95c8fc641d10cff61a14d536a2b5880868e3767aecf62793d8c4684c8cf4375d108ff901954e5180b7564d30773b6d00000000003a0000", 0xa2}], 0x7}, 0x0)

03:37:42 executing program 3:
mknod(&(0x7f0000000300)='./file0\x00', 0x1040, 0x0)
timer_create(0x0, &(0x7f0000000280)={0x0, 0x11, 0x4, @tid=0xffffffffffffffff}, &(0x7f00009b1ffc))
acct(&(0x7f00000000c0)='./file0\x00')
acct(&(0x7f0000000040)='./file0\x00')
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
unlink(&(0x7f0000000140)='./file0\x00')
acct(&(0x7f0000000080)='./file0\x00')
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000100)="61f73267e0b20b7a3ec0ad1ed78275e802fbb2a42fdfc94effc55068f66c0bced1b7612f58b1f50eda829ad8bae05bc5", 0x30, 0x8)
r1 = gettid()
tkill(r1, 0x1000000000016)

03:37:42 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1530.262309][ T4038] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1530.270867][ T4038] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
[ 1530.337805][ T4039] Process accounting resumed
03:37:43 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5416, &(0x7f0000000000)=0x13)

03:37:43 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semget$private(0x0, 0x2, 0x1)
semget$private(0x0, 0x2, 0x2)
semget(0x3, 0x3, 0x20)
r2 = semget$private(0x0, 0x0, 0x184)
semctl$IPC_RMID(r2, 0x0, 0x10)
r3 = semget$private(0x0, 0x4, 0xa0)
r4 = semget$private(0x0, 0x3, 0x508)
semctl$IPC_RMID(r4, 0x0, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0xfffd}, {0x0, 0xf000, 0x1000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:37:43 executing program 2:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000002580)='w', 0xffffffef, 0x10001)
r1 = socket$unix(0x1, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r2, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r3 = getpid()
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
setresuid(0x0, 0x0, r5)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)=<r6=>0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, <r8=>0x0}, &(0x7f0000000280)=0x5)
setuid(r8)
setresuid(r2, r6, r8)
sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
fchown(r0, 0xffffffffffffffff, 0xffffffffffffffff)

03:37:43 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x27a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1530.809605][ T4065] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1530.817962][ T4065] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:37:43 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
clock_gettime(0x0, &(0x7f00000000c0)={<r2=>0x0, <r3=>0x0})
semtimedop(r1, &(0x7f0000000040)=[{0x1, 0x6, 0x800}], 0x1, &(0x7f0000000100)={r2, r3+10000000})
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:37:43 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1531.255404][ T4078] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1531.264593][ T4078] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:37:44 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5417, &(0x7f0000000000)=0x13)

03:37:44 executing program 2:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc)
preadv(r2, &(0x7f0000000280), 0x0, 0xd9c, 0xfffffffe)
keyctl$clear(0x7, r0)

03:37:44 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140))
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f0000000040)=[{0x4, 0x829, 0x1c00}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
r2 = semget$private(0x0, 0x8, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(0x0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x10)
semop(0x0, &(0x7f0000000100)=[{0x2, 0x80, 0x800}, {0x4, 0x0, 0x1800}, {0x1, 0x17}, {0x4, 0x9}, {0x2, 0x3, 0x1800}, {0x4, 0x174, 0x1800}], 0x6)
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x10)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f00000000c0)=[0x7ff])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:37:44 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1531.785134][ T4104] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1531.793662][ T4104] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:37:45 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc)
connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
r3 = getpgid(0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$unix(r1, &(0x7f00000074c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38}], 0x1, 0x0)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000500)={0x1a0, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x187, 0x8e, 0x0, 0x1, [@typed={0x8, 0x72, 0x0, 0x0, @pid=r3}, @generic="6ef20ca6a27a6dcd11475f9b994e98eb8d9adc043996c197c8d8e29ffb74bcb97e82f296aac58f40cb2f7031d44c9d9d981387cc807991bb1c0acbf39ddd7be6ecedc6b25f973fd43238117fb4ad48bd501591857be61f8e41bbeb80bb68179ecd2c2c4dd3c991a08791376b438c770a69e61b02ab2de60626eb42c6716bc02f4add1f1cad101f3c56a46d19529626f663b3d6c664ddb80720f540acba9db2d8e8a21228b0e736fcc7c6c0423760ba950530e228b918e92f8b9dc6f6ae91", @generic="8a06597d5d25052e44dbea9a44ac2f8a8df5447482aa9aa35328ed6badbfa9db73a91b9a95cab30d5c7b1469e3919eda12ea3db119a5c255a1109be36e3fa6a53cc2c5a49bdf7ee7c1f9cf6e20be2543ee1ce02efbb2c8c2f8b26d482be02335ee2b5bca0a17066ad6e251f5f550ebfe1c383911cdb1523494c8c205c75eb7516f205c05fd9885c9b1a0ea4658e5968eb0a2a3377c9c1b222a451a945a19f500b7c2c439308598b7a4b07ad934274923cf2ed505a6d0461dd400f76146"]}, @typed={0x8, 0x1d, 0x0, 0x0, @fd}]}, 0x1a0}], 0x1, 0x0, 0x0, 0x4000000}, 0x40)

03:37:45 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:45 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x200, 0x4])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
r1 = semget(0x1, 0x1, 0x28)
semtimedop(r1, &(0x7f0000000080)=[{0x1, 0x3f}, {0x0, 0x0, 0x1000}, {0x4, 0x800, 0x800}, {0x4, 0x1, 0x800}, {0x0, 0x8}, {0x3, 0x733}], 0x6, &(0x7f00000000c0)={0x0, 0x989680})

03:37:45 executing program 2:
r0 = syz_io_uring_setup(0x235e, &(0x7f0000000180), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240))
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x419b)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00')
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1, 0xcb, 0x9)
preadv(r1, &(0x7f0000001600)=[{&(0x7f0000000300)=""/82, 0x52}], 0x1, 0x0, 0x0)

03:37:45 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='-/@[(-.,\x00')
r2 = semget$private(0x0, 0x8, 0x0)
semop(r2, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r3 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0)
r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x32, 0x2, 0xb5, 0x7, 0x0, 0x430, 0x20000, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3742, 0x0, @perf_config_ext={0x8001, 0x800}, 0x4, 0x3, 0x81, 0x3, 0xa0af, 0x6, 0x180, 0x0, 0x88, 0x0, 0x1f}, 0x0, 0xc, r3, 0x3)
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
r6 = getpgid(0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$unix(r5, &(0x7f00000074c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="ad96eb19000000000100cb0002000000dbe39242c89c7fa24a060cd9926a921798066fcc12bbde12c308894ac79119ca2d8c7dd03302bdb7c17fa4d5a484946eebf095b718f2adbd9e77554e5168966993e37d6ac0b55dc89d5cd399eccea194f6e97be9b48a61ed087e6041b68abd2514b48994c468a20044f5471d41b7ecb2fd3c0f44f97dc986f1d9f672dbd3f191e699946d90c9fe134f567bafc8469d0c4af1b4b0e656ecdda92899951de966efbb22faa5fcbd0a3d984774208e51eb5e13becde7b6ac00cd48ef8cff4cac", @ANYRES32=r6, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000bc14000000000000007b0ad45cbc01fa247c9ad20c2000000100000051b54fa32e387d656d3645d91a6e16b848d6", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0x38}], 0x1, 0x0)
r8 = dup(r4)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x41, 0x0, 0x7, 0x20, 0x0, 0x2, 0x80841, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x401, 0x2, @perf_config_ext={0x5, 0x755}, 0x1001, 0x6, 0x7, 0x5, 0x7, 0x969, 0x3, 0x0, 0x8001, 0x0, 0x100000001}, r6, 0x7, r8, 0x1b)
perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x81, 0x1, 0x0, 0x4, 0x0, 0x8, 0x1000, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffff, 0x101}, 0x40020, 0x8, 0x4, 0x1, 0xff, 0x7ff, 0x7fff, 0x0, 0x8000, 0x0, 0xfffffffffffffff7}, 0x0, 0x8, 0xffffffffffffffff, 0x3)
perf_event_open$cgroup(&(0x7f0000000140)={0x3, 0x80, 0x1, 0x80, 0x8, 0xff, 0x0, 0x5, 0x20240, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6050, 0x4, @perf_config_ext={0x5, 0x9}, 0x12200, 0x1, 0x8, 0x9, 0x8001, 0x8, 0x1f, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x9, r4, 0x5)

03:37:45 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5418, &(0x7f0000000000)=0x13)

[ 1533.151018][ T4039] Process accounting resumed
03:37:45 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000001840101005b8795185d923905e2e2000000000000005de000000500010001"], 0x4c}}, 0x0)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000d00)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x81, 0x93, 0x38, 0xffff, 0x2, 0x3, 0x5, 0x121, 0x40, 0x3be, 0x8001, 0x3, 0x38, 0x1, 0xff, 0xe, 0x1}, [{0x70000000, 0x10000, 0x3, 0x7f, 0x9, 0x9, 0x9, 0x200}], "cea19d1b3b5c302c8f35e3eb97ef9a680c089f871bb100eaabbc42ed26107bf4e12fc738e76cac77d4be9f0d69cdb432c45a4669436a2257f1164f93c640ec98b18b71d406ef2cc361437c6790ff8f3a5740f062bb5ba6c1267e346ffc0633ee6ce2f805f22e2f7f5a91da96b90f205f9b0aed9b1d7597affbb87b805a2569b414af7223f44c9d1134b17c1c619d363624347055a80dade66c73e62d3514ce4de5c6d6a62ed10cc15b2618b0232981bbc218a434692a9d5e73229ef6149a229821145902eac6d3c5a6ec093d5f76", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb46)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x38, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_MODE={0xa}]}, 0x38}}, 0x0)

[ 1533.254405][ T4134] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1533.262760][ T4134] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:37:46 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:46 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@timestamp], 0x18835372)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xd, &(0x7f0000000140)={@in, 0x0, 0x0, 0x0, 0x0, "f445b2c8ab79ddd000d6212489db87353d9d686adbad05e67aa3d8f11bcc95b993d6dfa83aeada449c5c6af73f7996255ad7c1fb8ed405b6722c7cedae705f693739e2830af2acc02a09510805f60239"}, 0xd8)
close(r0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x140)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000001, "ed105400000000003ec13e2000"})

[ 1533.745736][ T4156] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1533.754123][ T4156] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:37:46 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc)
connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
r3 = getpgid(0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$unix(r1, &(0x7f00000074c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38}], 0x1, 0x0)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000500)={0x1a0, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x187, 0x8e, 0x0, 0x1, [@typed={0x8, 0x72, 0x0, 0x0, @pid=r3}, @generic="6ef20ca6a27a6dcd11475f9b994e98eb8d9adc043996c197c8d8e29ffb74bcb97e82f296aac58f40cb2f7031d44c9d9d981387cc807991bb1c0acbf39ddd7be6ecedc6b25f973fd43238117fb4ad48bd501591857be61f8e41bbeb80bb68179ecd2c2c4dd3c991a08791376b438c770a69e61b02ab2de60626eb42c6716bc02f4add1f1cad101f3c56a46d19529626f663b3d6c664ddb80720f540acba9db2d8e8a21228b0e736fcc7c6c0423760ba950530e228b918e92f8b9dc6f6ae91", @generic="8a06597d5d25052e44dbea9a44ac2f8a8df5447482aa9aa35328ed6badbfa9db73a91b9a95cab30d5c7b1469e3919eda12ea3db119a5c255a1109be36e3fa6a53cc2c5a49bdf7ee7c1f9cf6e20be2543ee1ce02efbb2c8c2f8b26d482be02335ee2b5bca0a17066ad6e251f5f550ebfe1c383911cdb1523494c8c205c75eb7516f205c05fd9885c9b1a0ea4658e5968eb0a2a3377c9c1b222a451a945a19f500b7c2c439308598b7a4b07ad934274923cf2ed505a6d0461dd400f76146"]}, @typed={0x8, 0x1d, 0x0, 0x0, @fd}]}, 0x1a0}], 0x1, 0x0, 0x0, 0x4000000}, 0x40)

03:37:46 executing program 2:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
clock_gettime(0x0, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f00000000c0))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x1, &(0x7f0000000100)={0x0, 0x1f, 0x1, @thr={&(0x7f0000000280)="eca9b599c20bd9925b6890e3360c2f189f82d39e9636139cee05486095279e73d22bb85984af772ae2bb3fb8fdac863b320467027c42aa8ca3d0bf64d062b11d2881151e7710568324cb12cf539b8185dae48748ddcc275d4fc1b29bcfd718b748cdd0755f89ab2ea7dc4e0a2199834153f2e97a7f05ce7df114f3fd5342769db8fdd11207ab8cfc5e376faab6fdde506d3d11186ba388", &(0x7f0000000400)="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"}}, &(0x7f00000001c0))
timer_create(0x3, &(0x7f0000000340)={0x0, 0x2b}, &(0x7f0000000380)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000001400)={{}, {0x77359400}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000003c0)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x8100000a, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)

03:37:46 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541b, &(0x7f0000000000)=0x13)

03:37:46 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
semop(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x7b, 0x800}, {0x4, 0x5, 0x400}, {0x1, 0x8}, {0x4, 0x800, 0x1000}, {0x0, 0x101}, {0x0, 0x7, 0x1800}, {0x3, 0x101}, {0x3, 0x1000, 0x800}], 0x8)

03:37:46 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r0, &(0x7f0000000040)=[{0x1, 0x645, 0x800}, {0x1, 0x6, 0x800}, {0x4, 0x401, 0x2000}, {0x4, 0x6, 0x1800}, {0x1, 0x68d9}], 0x5)
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:37:46 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1534.308587][ T4196] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1534.316954][ T4196] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:37:47 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:47 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:47 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:47 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:47 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:47 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:47 executing program 3:
r0 = syz_io_uring_setup(0x220c, &(0x7f00000001c0), &(0x7f0000ff9000/0x6000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280))
setresuid(0xee01, 0x0, 0x0)
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
setresuid(0xffffffffffffffff, 0x0, 0xee00)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setuid(r3)
setresuid(0x0, 0x0, r3)

03:37:49 executing program 2:
set_mempolicy(0x1, &(0x7f0000000000)=0x3, 0x9)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000680), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x38, r2, 0x4308f4f9bf9a6a59, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x38}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r3)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000600000014000300fe8000000000000000000000000000aa3300070073797374656d5f753a67626a6563745f723a756e636f6e66696e650400657865636c656d5f657865635f643a73300000140002"], 0x70}}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r4, 0xd00, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:getty_log_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x80}, 0x1, 0x0, 0x0, 0x44004}, 0x8844)

03:37:49 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:49 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000440), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00Q', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000080002000200000024000480050003000100000005000300000000000500030002000000050003000600000008000100ffffffff"], 0x48}}, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xbc, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xa0, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16eb4597}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e0c43f9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe7}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e9f751c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73d31b5f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b99c9ec}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f8d7dc4}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x58b55b2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ad114a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a4215b3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0xbc}, 0x1, 0x0, 0x0, 0x48010}, 0x40840)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x0, 0x0, {{0x7}, {@val={0x4, 0x12d}, @val={0xc}}}}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r7, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff840d, 0x60}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x200480c5}, 0x810)

03:37:49 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541d, &(0x7f0000000000)=0x13)

03:37:49 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
semop(r0, &(0x7f0000000040)=[{0x2350a4edc6008c07, 0x1f, 0x1000}, {0x275bedbe55e5f76d, 0x3, 0x1000}, {0x4, 0x8, 0x1800}], 0x3)

03:37:49 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x114)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000100)=0xee)
write$cgroup_type(r1, &(0x7f0000000000), 0xc0000)

03:37:49 executing program 2:
r0 = socket$inet(0x10, 0x80003, 0x0)
set_mempolicy(0x1, 0x0, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x1000)=nil, 0x2000)
sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)}, 0x0)

03:37:49 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:49 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:49 executing program 2:
r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x7, 0x60202)
r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x52400, 0x140)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000040)={0x1, 0x0, 0x0, 0xfdfdffff})
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800007, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f00000003c0)=""/4096)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x3c}, {0x6}]})
pipe(&(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000140))
r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x4800, 0x0)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r4)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
mmap(&(0x7f000028c000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x37c7c000)
write$binfmt_misc(r8, &(0x7f0000000000)=ANY=[], 0xfffffecc)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r8, 0x80585414, &(0x7f0000000340))
sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4004850)

03:37:49 executing program 3:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
pidfd_getfd(r1, r0, 0x0)

[ 1537.258410][ T4263] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1537.308940][   T25] audit: type=1326 audit(2000000269.979:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4265 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0
[ 1537.309838][ T4271] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1537.341927][ T4271] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:37:50 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1537.772477][ T4285] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1537.781016][ T4285] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:37:50 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semtimedop(r0, &(0x7f00000000c0)=[{0x1, 0x7ff}, {0x2, 0x40}], 0x2, &(0x7f0000000100)={0x77359400})
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semop(0x0, &(0x7f0000000040)=[{0x4, 0x3, 0x1800}], 0x1)
r1 = semget$private(0x0, 0x5, 0x1dc)
semctl$IPC_RMID(r1, 0x0, 0x10)
r2 = semget(0x1, 0x1, 0x108)
semop(r2, &(0x7f0000000140)=[{0x3, 0x3ff, 0x1000}, {0x0, 0x1}, {0x3, 0x8}, {0x2, 0xfff, 0x800}, {0x0, 0x8, 0x1800}, {0x2, 0xe1}], 0x6)

03:37:50 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{0x0, 0x1, 0x800}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:37:50 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541e, &(0x7f0000000000)=0x13)

03:37:50 executing program 2:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x204100, 0x0)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x8, 0x1, 0x8, 0x8, "308637c973d03a448f62f04b87d3f229a9be1bcb5d99b006ea3736a65d43e9cfef8d57a72d0bf335e7296d98195dd69d0b97ffed3031af9c18a1d75a8c56e6fc", "befd6edead153cb5e84e076ab4343365346a312fc6ddc10a9cf169abd4850b4d", [0x401, 0x7f]})
r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000002000000080000020000000dcf4655fdcf4655f0100ffff53ef03000100003895ae00dbf4655f000000000000000001000000000000000b", 0x58, 0x400}], 0x0, &(0x7f0000000040)=ANY=[])
dup(r1)

[ 1538.028227][ T4290] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
03:37:50 executing program 3:
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
r2 = dup3(r1, r0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
io_setup(0x80000001, &(0x7f0000000000)=<r3=>0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x949880, 0x0)
io_submit(r3, 0x2, &(0x7f0000000180)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x3, r1, &(0x7f0000000280)="cf706fa05cffd1475fc76c7dd1aa383e9f3dc25ee6c2f5c53e433b6994bdf28feba627226033e1ee28580db1199f2a89545e8cdcea787810dd5cd4a2b10cb2ced43ba15c1804a1a44196b80a6eb890c5ef26844fe20ad049b37827dffebc0ca5772901f9cd176867846094e4064edf860e7b676ed4ea7c69dcc394fb9068e022fa0d1d6844a7078d4833803753ad110980ca17e807e0365f74fec98a9873c601469d093b6df79226230640b2d7486db59d1e3e83b26ceac1e28a06efa9f64554750ebf9db713dff4afdcdc05bd2aa05c60536ca7cfa2a4e41475eb94d3ea44cd2b", 0xe1, 0x3, 0x0, 0x3, r5}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0xfff8, r2, &(0x7f0000000380)="c5c9fe7b00fa9a53efa3da0e136073acdd1e5b84d40ca2f6d929dbfc9aaad20bf7f5de4986f6a34e49b9249092ad9d2bbeb4834a91ed406f37dd83f3a834c9723b9638888b6d01ebe49939c9a4df88f5b03e6485ee355fac89434429518ce89668e7cff25c75f96b22f9628098f480c8fd18dc1907824fff2cf751a24f3fb03b28cdb00cd170e71e88135cd8b9edfe936cb0ad8a4adbbd97ec57d00aaae7ac779a2569e81dcbaa69cf11b480c80957f9ccfa1754c225a6a803e81ffc", 0xbc, 0x100000000, 0x0, 0x3, r0}])
io_setup(0x40000000008, &(0x7f0000000240)=<r6=>0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
r7 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
set_mempolicy(0x3, &(0x7f00000001c0)=0x80000d, 0x3)
write$binfmt_misc(r7, &(0x7f00000045c0)=ANY=[], 0x4)
r8 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x48e16}, 0x0, 0xffffffffffffffff, r8, 0x0)
read(r9, &(0x7f0000001180)=""/192, 0xc0)
dup3(r9, r0, 0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0x60, r0}])

03:37:50 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[])
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0)
mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x2, 0x80010, r3, 0xe4ffd000)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r4 = dup2(r0, r0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0)
write$binfmt_aout(r5, &(0x7f0000000c00)=ANY=[@ANYBLOB="cc00801f740300007700000007000000960100001f0000000000000000000000d97a7983896e83571a538ddb3de4464dded2a0163fa45005088b084c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db8f50ea0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e9ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfffffffffffffff00000014000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d1fe6e692395169be23f2cb46d3a7712a5907e8db839a8d349b605730b2ad7de37b9bd09f3bbf75345389a9082faf01d115757e40fbf6bb0c7f03f45df292e73d3a47818fdceeeb71c033afa7c211f62fac98abb5055d82cf7d05d5e4435f23a08e4d6d4d5ccc4fbdb6be4a89e48b8e39f17e44a7524a9a7a1c830ca785ed3f2fcde29c703f8e3abd22dfb246ea2958a3bf35422a3760c68cd2f9612171a68214d075898dc88b51032d08d5bf81ff73c781d934c73b2cf451098952628fec9b854c22165e20d5b8ebcf090c75129f85bbde64bc9925001c4305afd"], 0x83c)
getdents64(r4, &(0x7f0000000180)=""/61, 0x3d)
r6 = syz_mount_image$ext4(&(0x7f0000000400)='ext3\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x7, &(0x7f0000000940)=[{&(0x7f0000000480)="6fc9091b92f08a99b08343984d30a38ff2971c6cf203f0db69a4fdb344c5f517a8c2944b9c325d98330a2b44d1e24185fb26f50957539274374adf3cc3cf1e525ad923b1a21efb9cc9b934943a0878298036fdd9f231d18d1ffb83af3da0dd46e9498bd92f79baab108a0649bc5a0ed2c583f49f15431334bc9721d566d3a3882bd5900f74454d9ddbfa37c6b986ae33c6ecf6d3ea166f9139251a8e9dcef7927116798ed33c0fe16502126042ab35b6cbc74cd651bb4c1fa71bfd3db2b9dbaf", 0xc0, 0xa1d}, {&(0x7f0000000540)="17ab2c807e45b43db69a033fff7240d644f49fbabf7776284ea3fcca10d930ff21675e553027ca6b10bfeba5bbec515736fa616c818b477b4487", 0x3a, 0x5}, {&(0x7f0000000580)="317e22e89c9d66ace5d063201aaf7b3b0bccee9d3f73579e095c58a4d5f7d096836570d9d7d615c0fd22a30f1bfe6c434d83fcf3372f7be55db0774636102d0b25d7d734795f4cb977432c04f64561bccc75d12de1e76373dbe41c78c1d59f3224c1519b73bb7127a7f49bc4708a913ec6a873027c92dd44081396a1ea1f1bacc17028f09e7f4fe25eecd91d364f33793fb4e95453ee76309645b6cb90d497fb5e249bd649fef06a103b7a036748d153c8cc84c7a5df26a204f0ef12f9c7af3c8a", 0xc1, 0x20}, {&(0x7f0000001540)="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", 0x1000, 0x7fff}, {&(0x7f0000000680)="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", 0xfc, 0x9}, {&(0x7f0000000780)="fc71ddc0b611571e0ec06a4ada0e5a2bc4d43865bab3c58bced4ac693bf280964fb193d364b19602bfea327d2f0a490655c6f659234e3240574d0d875ac881e9e97a64f9d0fd5563c4fbf841b72a98e737eacae215434626ee1d26ca32236ef86c7c79ecce8cdb4ed3f63cd6e40f64862f54067ac4641a401d6f01afab8bdc009064fbcc0c072f580058d8e6", 0x8c, 0x100}, {&(0x7f0000000840)="cc41e63037d4692cf5baa0f238b69485eab1013216d2acdef248d3fd88407de58173c3394eef9eb0f3159d770f5e0b2f36f0720bd898d67943b2980c767bab9e3ab048d48e1a95a29759ed5a6262ad9e356759fe57339e4f150a27997a0167d8c9a9d7c322e76883c4691920aa23b248e1e008e1c911c1724385b9ff6242f9cff36c862e574885ddf08dedf2f5e46c877d3d533f5612bc6f3935d33155c5cfce661c8ba82c0bd3208952b0fe68fd00fefcb3cda62cc90283a8f77cd193b64e1c3bcfb19d6205f454846a05bbf7eb4c9480cdd2b673814150f8a221a5e69de95b13f860", 0xe3, 0x6}], 0x24080, &(0x7f0000000a00)={[{@journal_dev={'journal_dev', 0x3d, 0x5}}], [{@seclabel}, {@seclabel}, {@obj_user={'obj_user', 0x3d, 'vfat\x00'}}]})
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a80), 0xa0000, 0x0)
r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x104, 0xc}, 0x18)
r9 = mq_open(&(0x7f0000000b40)='/proc/sysvipc/sem\x00', 0x1, 0x1e0, &(0x7f0000000b80)={0x6, 0x1, 0x78f3, 0x3f})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
write$binfmt_misc(r10, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r11 = open$dir(&(0x7f0000000bc0)='./file0\x00', 0x202000, 0x70)
r12 = accept$inet(r2, &(0x7f0000002540), &(0x7f0000002580)=0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000026c0)={&(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)=[{&(0x7f0000000200)={0x58, 0x1e, 0x300, 0x70bd2d, 0x25dfdbfe, "", [@nested={0x33, 0x65, 0x0, 0x1, [@generic="1579f30c41df046cbfaf02e99807f36b54680c50244d51e15d7e0727d2146f36ca6bd4215ca8bf", @typed={0x8, 0xd, 0x0, 0x0, @pid}]}, @typed={0x14, 0x41, 0x0, 0x0, @ipv6=@remote}]}, 0x58}, {&(0x7f00000002c0)={0x10, 0x1d, 0x200, 0x70bd25, 0x25dfdbfd}, 0x10}], 0x2, &(0x7f00000025c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r0]}}, @rights={{0x18, 0x1, 0x1, [r4, r2]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r4, r6, r0, r1, r7]}}, @rights={{0x24, 0x1, 0x1, [r8, r1, r1, r9, r1]}}, @rights={{0x24, 0x1, 0x1, [r10, r5, r11, r12, r0]}}], 0x100, 0x400}, 0x880)

03:37:50 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:50 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1538.359649][ T4327] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1538.368305][ T4327] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:37:51 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:51 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:51 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:51 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:51 executing program 0:
r0 = semget$private(0x0, 0x3, 0x353)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semget$private(0x0, 0x4, 0x20)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:37:51 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:51 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541e, &(0x7f0000000000)=0x13)

03:37:51 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f0000000040)=[{0x2, 0x9, 0xc9fde7898a4cd5cc}, {0x3, 0x200}, {0x1, 0xfffb, 0x800}, {0x4, 0xffff, 0x1000}], 0x4)
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:37:51 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
openat$cgroup_devices(r0, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0)
wait4(0x0, 0x0, 0x40000000, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
r3 = getpgid(0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0))
sendmmsg$unix(r2, &(0x7f00000074c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38}], 0x1, 0x0)
ptrace$cont(0x18, r3, 0x200, 0x2)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f292b8e3f78f4bf076484885fd408", 0x5c}], 0x4, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x24)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r1, 0x0, 0x0)

03:37:51 executing program 2:
r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x3)
r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='{-,!+/-.\x17\x00')
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x5, 0x1, 0x0, 0x0, 0x9, 0x800, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x27, 0x1, @perf_config_ext={0x7, 0xffff}, 0x20030, 0x5, 0x80000000, 0x5, 0x8, 0x3, 0x6, 0x0, 0x6, 0x0, 0xadc8}, 0xffffffffffffffff, 0x2, r0, 0x0)
r2 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0)
flistxattr(r2, &(0x7f0000000140)=""/241, 0xf1)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

03:37:51 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:51 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
pidfd_getfd(r1, r0, 0x0)
r2 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0)
socket$inet(0x2, 0x5, 0x1000)
fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000100))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000024f10000000000000000007a04e5001606000300000000000600040000ea0000"], 0x24}}, 0x0)
sendfile(r4, r3, 0x0, 0x100000002)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000040)={<r6=>r0, 0x10000, 0x10000000, 0x9})
mmap(&(0x7f0000744000/0x1000)=nil, 0x1000, 0x8, 0x10, r6, 0xf6a76000)
preadv(r5, &(0x7f0000000040), 0x1000000000000033, 0xd9f, 0x0)

03:37:51 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7a02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:51 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xefff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:51 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf603, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:51 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfc01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1539.297804][ T4381] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=61732 sclass=netlink_xfrm_socket pid=4381 comm=syz-executor.2
03:37:52 executing program 0:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x3ff]}, 0x8)
sendmsg$NFT_BATCH(r0, &(0x7f0000003b80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3a38}, 0x1, 0x0, 0x0, 0x20000010}, 0x2400c010)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)

03:37:52 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:52 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5421, &(0x7f0000000000)=0x13)

03:37:52 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:54 executing program 3:
r0 = timerfd_create(0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1)
timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x4781, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb)
mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x200000c, 0x8031, 0xffffffffffffffff, 0x6bde2000)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000380)=""/180, 0xb4}, {&(0x7f0000000300)=""/119, 0x77}, {&(0x7f0000000080)=""/10, 0xa}, {&(0x7f0000000240)=""/67, 0x43}, {&(0x7f0000000100)=""/206, 0xce}, {&(0x7f0000000200)=""/28, 0x1c}], 0x6, 0x7fff, 0x6)
r2 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x0, r2)

03:37:54 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
r2 = semget$private(0x0, 0x8, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x10)
semop(r2, &(0x7f00000000c0)=[{0x0, 0x3, 0x1000}, {0x4, 0x8993, 0x800}], 0x2)
r3 = semget$private(0x0, 0x2, 0x408)
semtimedop(r3, &(0x7f0000000040)=[{0x3, 0x7}, {0x1, 0x1, 0x1000}], 0x2, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:37:54 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x891b, &(0x7f0000001a80)={'sit0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8918, &(0x7f0000001a80)={'sit0\x00'})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'ip6tnl0\x00', <r4=>r3, 0x29, 0xc5, 0x9e, 0x4, 0x0, @empty, @remote, 0x7800, 0x40, 0x0, 0x7}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl0\x00', r4, 0x2f, 0x1, 0x80, 0x5, 0x66, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x7, 0x8000, 0x7f, 0x7f}})

03:37:54 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:54 executing program 0:
semop(0x0, &(0x7f0000000000)=[{0x6}, {0x0, 0xf000}], 0x2)
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x2, 0xf000}, {0x1, 0xff}], 0x3)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
semctl$GETZCNT(r0, 0x2, 0xf, &(0x7f0000000100)=""/214)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(0x0, &(0x7f0000000040), 0x1b9, 0x0)
r1 = semget$private(0x0, 0x3, 0x104)
semtimedop(r1, &(0x7f0000000200)=[{0x3, 0x0, 0x800}, {0x1, 0x77, 0x800}], 0x2, &(0x7f0000000240)={0x0, 0x3938700})
semctl$IPC_RMID(0x0, 0x0, 0x10)
semop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1800}, {0x3, 0x5, 0x1800}, {0x0, 0x5, 0x1000}], 0x3)
semop(0x0, &(0x7f0000000040)=[{0x3, 0x7, 0x1800}], 0x1)

03:37:54 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5423, &(0x7f0000000000)=0x13)

03:37:54 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0)
read(r2, &(0x7f0000001180)=""/192, 0xc0)
vmsplice(r2, &(0x7f0000000440)=[{&(0x7f0000000140)}, {&(0x7f0000000180)="e1b5f1749e6df24e1100860fd7e1fdf98ba745b4a4c3fdbc7db1681a6b37241747ead7ecc3dceec797ad1f6868d0a752fef182d17a05311619be0620429e8436fdb8a382c28d878b23fc080aa345adac939de7e212c0061566cc3d802d120c1353f42dab6d172807faa40b0bb26bd556bd3cd186ece4624ea45b3fc4f981051738", 0x81}, {&(0x7f0000000240)="ef4680be298490d78b85b0b8de21c0bd945356879fc98a", 0x17}, {&(0x7f0000000280)="ac68b952da202925c887400fb1f60fd3f03954f2b38703855608cb50207db54ec27021aa76", 0x25}, {&(0x7f00000002c0)="7ded31cf3e5fc24b2869130e2294744d91e0c6d6daa79895723993ff50e3cd4af2ed09d5dfc2af70afd87ab86ec8449c45c38e3372874aafce9cd2e7d238280680de47e35b93e382f404bda20394ed3c8e4a0370de922ac39845", 0x5a}, {&(0x7f0000000340)="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", 0xff}], 0x6, 0x2)
r3 = syz_open_dev$vcsu(&(0x7f0000000040), 0x1b9a2540, 0x0)
read(r3, &(0x7f0000000080)=""/152, 0x98)

03:37:54 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000140), 0xfffffffffffffffc, 0x0)
ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000000)=0xa)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000100)={0x3, 0x10, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0]})
r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x80200)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000280)={0x5, 0x38, '\x00', 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r3 = dup3(r1, r2, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0x8, 0x4, 0x19, 0x4, "7c13b77d9bbce1da5ded9daac6ce0451869975d416b7d26d2e83e53491c42cddd6d427d3c18fe3aa6eed962514904e0d97e1683830aa89620f7f7fe3a313dedc", "bfbb0cdb91e7df9f5bf6806cc9ca1940597bb3b56ad77d67bcce464e3e4b20ef", [0x5fde, 0x8]})

03:37:54 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
bind$packet(r1, &(0x7f0000000080)={0x11, 0xf7, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000380)=[@rthdr={{0x28, 0x29, 0x39, {0x32, 0x2, 0x0, 0x4, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @flowinfo={{0x14, 0x29, 0xb, 0xb7}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r2}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdr={{0x58, 0x29, 0x39, {0x87, 0x8, 0x1, 0x7, 0x0, [@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @empty]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x2b, 0xa, 0x1, 0x3, 0x0, [@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @private0]}}}], 0x190}}, {{&(0x7f0000000540)={0xa, 0x4e24, 0x57, @loopback, 0xfffffffc}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000580)="839e5051fec4299367e7acfb6a08c015e7b5020a967a20f4000c322197c5035b6f571fc21842777212bc1cb12900d17fbe5a8411b26ac512238f558110e5a401765041ca32a941766dd8f17d7c2b48df942108c9d90fd6f6e6894c5f7fa4562b38badfe629b29bbdb036aaf3faf47edcc590741bc6902c37e2294a87930af2e2055da4e3000994", 0x87}, {&(0x7f0000000640)="2726b87596bcb6562eba106dcb518139e313253e9f43cd430dec0f8bc2fe49bdd7e1555d58a5", 0x26}, {&(0x7f0000000680)="e32b462a206c8f867d647049d7088ba83de1e9bd5e02ea16bf897c01f73a9b531827639f970cb74e7d6f48ee102152b4b91e0243339503da58ad111672ba5829e770d07c254ad0187ab7f593a9fbed1b7aac8432d3c22687a16c04089dd96bb44b885e48acee8218bbc5fa8a9abdbd13bd61a5c33311eab4850fd83ca327b8409a764c4ebe4a5adc7c5719976f27f3b65641c4075b12655660ce30bbcbe4d440c92710b46909e3347e7c70cab1bf2a59d7c11915336c5376b19421e47e8c85ab2c652c70d42ca8540ebffeb30be62bf865b72c01c1b400591ee5fc37bf685785157b230a53a8a14e478931e6eaedcb", 0xef}, {&(0x7f0000000780)="870542018633295b8160acd2a2f9235e68ef6540a0a1eba8f07dcbeb19d50529bbf7e92943fef1e32f1a1e409b053985ddf709b6fe59e03bd1da71e6267721f6dfaa35b3ca7b1913fa459c0369be62c54e69264b8b1093c7141b6c5c3a3ce913d4aadced5a1dd07880ca85626e2e292cb9", 0x71}, {&(0x7f0000000800)="285911e1f4716e44f0ff1d2341f9b46f272b00a25302cbc4093393ea76c2a92770d4b64724a1d161bfe6bdf313068388fad7d785710a3f90851c7081921e606960cbdf6db3b73f6935253e8d50a31b51b5df9f863d86b266c134f051e10e153f9e740e77977d53d6ab48c36fdd9f8391485a7e0f917e71656b3dabcf7d3e255109826a048afdae10a921b8bebc99782c991fca73d1117b0cf5952153487eebcb4de5b3cdb1ac9866b28822d5fa26a09bea949be026cd425b", 0xb8}, {&(0x7f00000008c0)="9556f3d91273cb92fbd5121f7be47e05421951dc2fde241156d18d90c715e1878ec1312c6f96dea057b23e13df1056ceed874cb2e4236c66f020ba17e44b1e682f3ef5176b73d78241c157d2100aac1012ea1760cfcee8e38de2ecab0997092680c3d8056cbda59a489163231e78c352952da958ac01c982c75e965b2a8ba6568e70385153a0758ecd191b052cacffc8f5b466e087f00137e4765090", 0x9c}, {&(0x7f0000000980)="ae9dd6fd919e6970a49910d7436f797e969515151f00f32484e6b33aa40b1745be10bd9be9de6ec5b197a600a5651cc17f70d7d8518aa869519abf55e282507249c87226a25c61179b3b3d82d0a565cd563b697bea3e42ff7ad4b130381e11deee4f46ce5249f0f9539a9331b46e54c5ebc89617a7d96c92b18e33957a7701f9f9", 0x81}, {&(0x7f0000000a40)="f97d7e26ad433dbc7b5c1058520f940332b2a2c03921b75e11b5d934b437ddec8c53850e14576deba530ba50482326271e5a6a65bab25bdf986d164431ed0af3ce5e28af23b46754d2d280b900062af88ccfe7d7b8958e2d668ddddb88a0ff53f5e3bd949096e3caf2966674ba", 0x6d}, {&(0x7f0000000ac0)="25ac7171ed0f979f7d745ad62c8252991e09e101e32c55e49581a93ba4ef968b6cb8c96913f79cdc9c4da30d680c57be3d90d5a96ca887859c63f1d439d1174024e4b5464b23a1e6912b818d", 0x4c}], 0x9, &(0x7f0000000c00)=[@hoplimit={{0x14, 0x29, 0x34, 0x1000}}], 0x18}}, {{&(0x7f0000000c40)={0xa, 0x4e20, 0xfff, @empty, 0x8}, 0x1c, &(0x7f0000001180)=[{&(0x7f0000000c80)="7eba89b3507612510406e466d54ecbeec9609ba36e09e41805971fac00956807bc69b05cd6973b8be1a52499b9b8b6c1c599929d48997f54b8c971f132ab9a8e80cf8097558deace50", 0x49}, {&(0x7f0000000d00)="fb0aae5d7d8877e721ee3a24b046056456e59e16003a9226fc6090c57b5b7cec1b874b3ee723ad823a06f542f81be7b30847c237576823ae882e6ad3a10d", 0x3e}, {&(0x7f0000000d40)="c80fecb237194f2385b151faaf3eb5cea4f92050b89983f4b2af6669b088206ae91699b269edf1c48fc51801ed2c8bd0bb68c89cf72a5e63b2a55bc0fa1510f5a296b6af6b3f595771ca3fe2af270a4863a90a6994c4594413643fa6123e2b4a82f8786fbf32b28d6c4d55e3a9dd99572cd697fd2ce1c9e09aafb00660631070eb354e697fadad37362a4cf5101e2a24e60c67d8a7ce615506afe5be6ab4e12c706c415846111aad715691", 0xab}, {&(0x7f0000000e00)="97e2812adc6421faaa3884d702245e2e3e486d151678be1180122a3f1a076ed6a22c4b507cb0c779713bbc826cd91f9bca501e7cb6bed9a625d78a932540f25c76e643d5b83865a1d3307d43b2be542c400517dcc669090ae3e7aae6c9e456e6ab97e2a6fc7905bd28637af39cf62a698efdf1ca203faa22fe3ea60e8ffed7c6cc5157f30a6810919d1579f71aebd36ee58bd6e661546bde0116f941d3c14dd7f09995a2eaab9329d4eaee54943179169bc5749cf62f1506364753ab04bc1a6d1457ccd4919678a13496b9c132ea6453183e46c26204b6f64bddd8378b4d530370787d42f48bf9545719e0beafe95902f263f6fe4d", 0xf5}, {&(0x7f0000000f00)="14ac79a79676eaec41243effa483099c99f2b1c35651850d84977cedb954bc5dfb481146c7ebb638845e80b794d0027262f6247b4421ebd4acf0f83a1add4c6be87a1fd48704f8cc9b5fb925381f6f357cbc131675ca648c152e9c05", 0x5c}, {&(0x7f0000000f80)="02ea6dafd1fb7b2f455eeca0a55c95eaa16071d278378ea894e2b5453f2484f0ecdf179e9fa3e3fc8fbf749c08cb5ad2d11e5ece6b89ea7bc3e1549c96da2e1593cba30abcef36d286762d4d0d3dc9771a663081cde2e0383082b9a8825421c5e24c599b3f4f436f2ee43fbe95ecaec999fae8f7b915b4443ad8fd6e6687fa836a65c45cd2c21f16f023d4a60f5e592e145afd8233f7866264f8130f33f25fca52acc8e41fa15f11644b560d0067e15017a02811b84da9b41537c31cb66f63b6bc29053f07a6ff2e1e64b0", 0xcb}, {&(0x7f0000001080)="e635863d96f8c24c284ec6a96f93cf20137db0aa99217171543f16f993fc6012c2abadc0ee2a0493f1b9daf80cccfb7e7e3189e2ed13a483dabffb6e9759796abc4c763a6f44b1f65aaa6d8dcb01b61e1ba76ab38ab0ec80a5644ac12e05c2f0ebfe61279b990b78c37ec6e0def052c7a401f7a8a9f2f4ab7c47f1aa252954ce40cfe9c349e6bd7a4362138b8d09137747d45a0111174ab139c7e3c86560a5fb59dfed46c74c373579adfe2cd60aded497d0c7d7a1f686b8ec7a118c30f078cf978c207fdfbb76bd958efc7bf9bb0763ca372f2b533f55f4455d53fd8db5f9df85899e3c9a1d78511a75ac", 0xeb}], 0x7, &(0x7f0000001200)=ANY=[@ANYBLOB="2800000000000000290000003900000062020202000000000000000000000000000000000000000114000000000000002900000008000000400000000000000024000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=0x0, @ANYBLOB="000000001400000000000000290000000b0000008000000100000000300000000000000029000000360000001102000000000000c91020010000000600000000000000000000000000000000140000010000000000000000430000000800000000000000"], 0xc8}}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001300)="ca57327af09149ecd01ec05a3995c07b7ddefbff360c707f871bca7b94b169f609e74493eb8512cd271a48be4cb50c9dac922fcc0e839586208d0a61d706f40e6c79113bba6820a03c56e6db476f2010718f19269904297236da", 0x5a}, {&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000001380)="7b8bac29ede137c75a2c6be83765bccac604c25c5a81acd1d700023b4183bf7eadd00fade94568c6fa269f6af2c6dc5c5b52108761a8bb4480d34deb1e6b170f56acec8a0548ed8b6dd1d7567a243a02da932774f57a2d0b20ad6adf64d3ffacde3c8ca37444983a971ee701c30d9d1bb0135a4137d6b90234473af2243b78f184fbcd3be29aa7a1be9488c900dd89a707", 0x91}, {&(0x7f0000001440)="79e4039ed880229e5fa9d7e22b62526aae00a603c375449a3bf90a8be278676ad5b425148295ced959fbfcbd8f8e5169de0fc94f9fecbdab92586f33184e19286f5dbaa683c5eef0f2b45ca4a77dded29a2d800a5ec09a4b91e2bf95e174faa4d2e7c02dffbfec56b547055b6bbeef3d5e16f6fe458a96dc06e32df0767f503f199675a359f1923debba14858a3c547019ebc89593485c7404ad9d7f51570a0b1c8d5e9f07549cb928bd0985257580cf92a6ffbd27ccb659895790146fe8b0f2b6f60d60af0e94503d4a9beefdf8c7e51020fb990aee6820c34a76b16c273390e73ff2b0", 0xe4}, {&(0x7f0000001540)="904599ae21d0fee50c3243ce85427a75bb63586d842cab288c2b8f5754ec3827370d3c6f410a065ccfe136030b47665e95aa953d03300d012952a57a9478", 0x3e}, {&(0x7f0000001580)='w', 0x1}, {&(0x7f0000002680)="deefbd56aa944e46a9baf17b9977eaacaffcc738eb9e175318148de56fee582520abad4f849ae3b9f8240cc77ef9d61a412bef40184fd0a298fc21b20c4d2a75d4d094b168e99768526e57aea025d42b26ecfe07dd7108f688c59c61b641ec51d944cc298c5b8d3a3010d474d1870b39303a9dea48fe57f024c074cd651b675fc62b", 0x82}, {&(0x7f0000002740)="cb78897cd88addfdd23b0ff02026fc5696609835088b5f41f3e90c9f1b129dd4edbd678c1af7ccb5f91562f3c0542167bcf1d39a0c2aaaa482c923817bd41dd65006edd71237315721f50973e08647b4ee874e598f6693267a68c43018362dd4181ac525c38fa15c483e49d5327b51490f4123b8b145c369a9411c40bcb0756debdf12b35f7ffb0f147d0f953930f42c6396838de3ac16b611686fa87d37a9d29340d6e8a0dd8ec2f8966080a58f27348739bc3a1ac26b7155dc027c93969d40bf539418dc965cac16d80ced3b3b69658dfe1afe2047b1a99de263b97856dd17a7c0a8e345712eba25", 0xe9}, {&(0x7f0000002840)="f26c3b87470110001f00c6282d2cb3b60f0c3717c809b5b0be0b06b024b148d4c0cf8ca6a9f87848682e4025032ea7cde05e85124c94a622cce591426ee4608bf05b2b34499016581e58e386c97e9f9e47316d0d3051841bf7802e5741021a7a8c87f1aa34f00e4273cc5fee60a61b7ef4b019edb4abae1b10e9f0ebb68ed7ace10bec23e178cad3ba13ccecf8373c429d188b7244a94b1221d2090de05bad", 0x9f}, {&(0x7f0000002900)="98b5609c53def2f0c495bd364e0e7a456337fae9d8fe039f0f6f2495951ad00963392ae72c0f0fd8ebca323aa166dd74715d3793802299b06d00ae580c0f7ebde943bb54cb1150dd0ebe0b98", 0x4c}], 0xa}}, {{&(0x7f00000015c0)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, 0xfffffff7}, 0x1c, &(0x7f0000002c00)=[{&(0x7f0000002a40)="b04d42f0d66b01f9350de77fc0fe486ddfa64f2587e76ba1b2d2711753da9a8519687237753e124ae7a016cf65fa2e5494cce73bf61b431d6cbe2e9bd22fc0bda4581ae787c184c1262c922a6a9103afda3c32796c6421764490c4e649bfa0c846354b70bc23be6ce6cc51ca322a70973ba5f006af4e4ce1b7a66f2ae3d4c32ef3be7edfd9e04905e4cb86c9c5025b2afc97be80", 0x94}, {&(0x7f0000002b00)="43583ccb768cd703dd29179022e9bc4d7365162348e68ac6", 0x18}, {&(0x7f0000002b40)="c2fa51bf4943686497c589d7e8c6ad50fdde7b54f00def9eb13433087c0fd3e22fbe819f5b4c32685c191742ca98c8c0f42bd523ce072b904cec233c1b2ef02c9fbe499337628b800752f29003f20f972a83d5bc06e3799afeedd9b372cb3a407576780f273b14f87858d49c01c501764490e5da7b847e492e1e2d2ce688c054d1d8c57358106b2e51c06c485ee8cceaaaffe3b7", 0x94}, {&(0x7f0000003680)="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", 0x1000}], 0x4}}, {{&(0x7f0000002c40)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8}, 0x1c, &(0x7f0000002dc0)=[{&(0x7f0000002c80)="f26759cdda81b92061a2fa5fa13cee9d867c643a81f941669f65cee5f550ee29cd0b68b7fb124625a3e80717101ebb0ea406ebece20b31483ff44d7c42b98c006ac976fadb24a01f0e55c8e1bf41489faa7eec652026b53c0997511a15eb22de4fc07be7fa48759bebc8c4b1c7ba46455c348f97bbdea3465da02547cfe659d6e77bb7cc4650ccf0a5168430eb757825406bd03ac45e89908ec1a649b4762c165f018796422b371b2a5c6fa0b1a6063848009a1a8f137976e88e2c5d3af0bb", 0xbf}, {&(0x7f0000004680)="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", 0x1000}, {&(0x7f0000002d40)="8155cd48bda5475e9eef06140013ea3a22a827fed8edd1ec0bdd72fff3ddd1a28251d6f2b2e0b0968eb4e364012d422c824822f3adcec0ba79936ec401e45caad8c13162257de9d0b61e7a6f7e4d8aaaf67df6f2", 0x54}], 0x3}}, {{&(0x7f0000002e00)={0xa, 0x4e20, 0x100, @mcast1, 0x82}, 0x1c, &(0x7f0000003180)=[{&(0x7f0000002e40)="3ca89a72e035d8fd1aa16eb1c4982f01c7065af5bc490e6c51c7e6beb58bfb440392fd75c5b35f8200dd1145779fe4a4f8afffe0720933e44b74f2347112569b9ab5bca29158de7ab69281868f08c1d375806d0f4ce22c22c06b9953e59bcfe3536aeb31d1c63b6df6f1", 0x6a}, {&(0x7f0000002ec0)="9eb9d042144eede3f5362de331c74791654e098394b0afaf673e0bac62fb543648ca1efeca53fff079aaf37d5a22e4112dd6e2ab885c2f0cc493cae6f0891e82b0da06f7932a9e7a716e9bdc40fc7c5024137df82dc6e63f6a037a9da7abac194c4e1eb86ddce498f7eb273159975da3dbc98ec9b8674c29e752c7", 0x7b}, {&(0x7f0000002f40)="44a253592b", 0x5}, {&(0x7f0000002f80)="f60a85eeb6bd97a97b6b1f4abd7dfe826e84a929f478b3cd3749a801a2fe0cfc2bc8bd626e172ff88b0c756b75ac789b5411b4cab177b9b4e4487cea0fd202cc3d3bb821e3a75f6a7fd7d91e9272997793a6d77daf1ef469aebf3629968fbfc50f3825e4a03f7dd9a97069b13d22ceda10c56f3d2b4ef77eb576cba965a143b5aff96e7d813e232b68e4ef04c3602bb08b46919f5ad144ad5e48cd06f8906b8db7f5d0345e872b0465934bf7fb6c3ce7b03b5b9e3e126b6e0ddc8cc7f42a12a2dc3a466fb97ef625560e08ac8c2cda7cb002a04eba", 0xd5}, {&(0x7f0000003080)="cda9aeb7a83261d314217f1c172916404ece48fc7d22c2fc10c8e2ead4e80ab343b2243097d7875dafabc8d658dbbccbf07fc5fc812afa78a7e2156361b5b1757b1ded7021b02fdf3305135e0d5879e00f64ccf02496abdbbce54250d13318135436e5369dd7d1f68424c8d24521f5063e8e3ffae0015c2b361722dfa4b36e3c4943cd577065b73d6954ceb61d11d948f1fe71a1663e2931a6441022fe42ad2f9e42a06a79447cc4965ad3db8ff335b53341720fadf89fb97b6359f07d5e4f68a308c993fc72600c22", 0xc9}], 0x5, &(0x7f0000003200)=[@tclass={{0x14, 0x29, 0x43, 0x3}}, @dstopts_2292={{0x148, 0x29, 0x4, {0x89, 0x25, '\x00', [@hao={0xc9, 0x10, @private2}, @jumbo={0xc2, 0x4, 0x1}, @ra={0x5, 0x2, 0x6}, @jumbo={0xc2, 0x4, 0x100}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0x2}, @enc_lim={0x4, 0x1, 0x1}, @generic={0x1, 0xec, "8d595b33f8b73a3ce310837c608bc87a246b76979866fb4876c2ec8a72d5672e0befc5708907db1f34b769743e92bc4865db4ea159cbf3145498f31851b03fa1b22dc5a0316b694e76151e9e088efbb40325f95cb3eba991739073b4d16a812aca76b72fff7400553e1e206c76908dfd273aa991e86b1b6bd65235bb06d99d3c5deaa8698e8ad46ee826c2137ec22ed0de11919a00149f723a55fa63a77f3a2e3a383c14ad1517f2e0d0d64b25855348a719feaf2b81e2afc5dcf433843c97ddc9cf407c265c0695e9f3b2fa122894df387237559b34f861725d4643f4758a68cbb222fc1f92413b56ea11a3"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x24}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x5c, 0x3, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x0, 0x0, [0x800, 0xdf]}}, @pad1]}}}], 0x1b0}}], 0x7, 0x20000000)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mlockall(0x3)
shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil)
r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000003600)={&(0x7f00000035c0)={0x1c, r6, 0x1, 0x0, 0x0, {{0x1b}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r6, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040110)
shmget$private(0x0, 0x12000, 0x8, &(0x7f000013e000/0x12000)=nil)
shmat(r3, &(0x7f0000108000/0x1000)=nil, 0xffffffffffffdfff)
shmat(r3, &(0x7f0000000000/0x13000)=nil, 0x4000)
syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000))

[ 1542.192417][ T4442] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1542.200869][ T4442] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:37:55 executing program 3:
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
connect(r0, &(0x7f0000000140)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x80)
r1 = socket$packet(0x11, 0x2, 0x300)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc)
ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000000)={'bridge0\x00', {0x2, 0x0, @loopback}})
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r4 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f00000001c0)={0x2000000b})
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff000}, {0x6}]}, 0x10)

03:37:55 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5424, &(0x7f0000000000)=0x13)

03:37:55 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:55 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x9, 0x1c00}, {0x4, 0xfffb, 0x800}, {0x3, 0x1f, 0x1000}, {0x1, 0x7, 0x1000}, {0x0, 0x3, 0x1000}], 0x5, &(0x7f00000000c0)={0x77359400})

03:37:55 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:55 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semctl$IPC_RMID(r0, 0x0, 0x10)
clock_gettime(0x5, &(0x7f0000000140))
r1 = semget$private(0x0, 0x8, 0x0)
semctl$GETZCNT(0x0, 0x2, 0xf, &(0x7f00000001c0)=""/64)
r2 = semget$private(0x0, 0x8, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x10)
semop(r2, &(0x7f0000000180)=[{0x0, 0x4, 0x800}, {0x0, 0xfffd, 0x800}, {0x0, 0x3, 0x800}, {0x0, 0x9, 0x800}, {0x1, 0x727, 0x1000}, {0x2, 0x40}], 0x6)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1, 0x2, 0x1000}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
r3 = semget(0x0, 0x0, 0x0)
semtimedop(r3, &(0x7f00000000c0)=[{0x0, 0x4}, {0x1, 0xffff, 0x1000}, {0x0, 0x2, 0x800}, {0x4, 0x7fff, 0x1800}, {0x1, 0x6, 0x1000}, {0x4, 0x4f, 0x1000}, {0x3, 0x80, 0x1000}, {0x0, 0x7, 0x800}, {0x3, 0x9}, {0x3, 0x726, 0x1800}], 0xa, &(0x7f0000000100))
semop(r1, &(0x7f0000000040)=[{0x1, 0xffe1, 0x1000}], 0x1)

[ 1543.189840][ T4507] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1543.198260][ T4507] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:37:56 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', <r1=>0x0, 0x4, 0x40, 0x1f, 0x7, 0x31, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x7, 0x1, 0x0, 0x101}})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x17, r1})
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r2 = socket(0xa, 0x2400000001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
getsockopt$inet6_buf(r2, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x6, r1})

03:37:56 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1543.721847][ T4522] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1543.732321][ T4522] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:37:56 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xa, 0x13012, r0, 0x0)

03:37:56 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5425, &(0x7f0000000000)=0x13)

03:37:56 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semop(r0, &(0x7f0000000100)=[{0x2, 0xfffb, 0x1800}], 0x1)
semctl$IPC_RMID(r0, 0x0, 0x10)
r1 = semget(0x2, 0x0, 0x400)
semtimedop(r1, &(0x7f0000000040)=[{0x2, 0xffff, 0x1000}, {0x7, 0x3080, 0x1000}, {0x1, 0x0, 0x1000}, {0x1, 0xbce, 0x1000}, {0x4, 0x7}], 0x5, &(0x7f00000000c0)={0x0, 0x3938700})
r2 = semget(0x1, 0x4, 0x420)
semtimedop(r2, &(0x7f0000000140)=[{0x3, 0x401, 0x1000}, {0x4, 0xfff8, 0x800}], 0x2, &(0x7f0000000180))

03:37:56 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @loopback}, 0x10)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x42203, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x5)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=0xffffffffffffffff)
sendto$inet(r1, &(0x7f0000000140)="2e60963c8aaf51ccaa6b070249270ec1264f9796d3c46b3d13826c93cc0f7f26f5faf2e9244bccb5c46fb9a71c8930122bea8808e0b03234b3e5c57d7a8ad7083a2df692abee503bd6054992888a7b2490faba4d7d9ccce90b6d4f366ad4382c4369ac2b38f3a5341aadbf2f526e6c648db2d6b77e395383f641dfcd5a5b20f647d663b076997b5caf550a46598cf0ccad33f1d5f97920dcdcf64159a9319631155f65bfd0fc923e654f53f9ea78e78856c8318437b61b2f09ea4d03749fd6a51a0579e480fcb791c7e73f43aa64be0c57f8cea3257f4c471934", 0xda, 0x40000, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
syz_open_procfs(0x0, &(0x7f0000001a00)='comm\x00')
recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39)

03:37:56 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x0, 0xfff7, 0x7, 0x7])
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:37:56 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:56 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:56 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:56 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:56 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:57 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
mmap(&(0x7f00006bc000/0x1000)=nil, 0x1000, 0x100000a, 0x2010, r0, 0x89a16000)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x5}, {0x6}]})
ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000000c0))

03:37:57 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x2, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x8820}, 0x2000)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x1f4, 0x0, 0x1, 0x5, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x58, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}, @CTA_MARK_MASK={0x8}, @CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x0, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL, @CTA_PROTOINFO_SCTP_VTAG_REPLY, @CTA_PROTOINFO_SCTP_STATE, @CTA_PROTOINFO_SCTP_VTAG_REPLY, @CTA_PROTOINFO_SCTP_VTAG_REPLY]}}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}, @CTA_LABELS_MASK={0x0, 0x17, [0x0, 0x0, 0x0, 0x0]}, @CTA_TUPLE_REPLY={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0xffffffffffffffdb, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_LABELS_MASK={0x14, 0x17, [0x0, 0x0, 0x0, 0x0]}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x1f4}}, 0x0)

03:37:57 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1544.454678][ T4587] netlink: 300 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1544.467253][   T25] audit: type=1326 audit(2000000277.139:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4586 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0
[ 1544.491205][ T4589] netlink: 300 bytes leftover after parsing attributes in process `syz-executor.3'.
03:37:57 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5427, &(0x7f0000000000)=0x13)

03:37:57 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:57 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000440)={0x1, 0x80000001, @start={0x0, 0x1, "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", "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"}, [0x0, 0xd89, 0x0, 0x0, 0x9, 0x0, 0x8, 0x80, 0x0, 0x1, 0x4, 0x7, 0x0, 0x7, 0x0, 0x1, 0xf9, 0x0, 0x7fffffff, 0x2, 0x20000000000000, 0x0, 0xfffffffffffffffb, 0x3, 0x9, 0x0, 0x80, 0xfffffffffffff74e, 0x2, 0x7ff, 0x11, 0x7f, 0x3, 0x9, 0x8, 0x5, 0x1, 0x2, 0x8, 0x3f, 0x19d366d7, 0xffff, 0x0, 0x6, 0x0, 0x9, 0x0, 0x8, 0x4, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x9, 0x1, 0x0, 0x4, 0x4, 0x5, 0x0, 0x3, 0x631, 0x4]})
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001c40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r4=>0x0}})
socketpair(0x1, 0x20000000000001, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, &(0x7f0000000e80)='lo\x04\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x8eOC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xc1n\xb0#\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xdb/f\xa1\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\xaa-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\x96\xe5OO\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ\x00\x00\x00_\xd0\x8f\r\x0f%\x82\xbe\xde\xa0\x9dG\xc3\xdaR\x11\xfat\x06\x91>C\x15Ui\xad#\a\xc8z\x9e.Si\x03&\xa5\xc0.\x85\xbe\x13\xb1\xb83\x9ds\xab')
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000500)={0x6, 0x0, {0x3, @struct, 0x0, 0x7, 0x6, 0x10001, 0x7, 0x7bc2, 0x4, @struct={0x2}, 0x5, 0x0, [0x0, 0x7, 0xfffffffffffffff8, 0x0, 0x0, 0x40c]}, {0x4a, @usage=0x2, 0x0, 0x3, 0x800, 0x0, 0x0, 0x81, 0x428, @struct={0x0, 0x20}, 0x0, 0x2, [0x100000001, 0x0, 0x5, 0x1, 0x8000, 0x9]}, {0x7, @usage=0xffffffff, r4, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @usage, 0xe0000000, 0x0, [0x8000, 0x9d86, 0x2, 0xf4e, 0x1, 0x3]}, {0x0, 0x9adb, 0x5f2}})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0)
r5 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r5, 0x0)
read(r6, &(0x7f0000001180)=""/192, 0xc0)
ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000001100)={r3, 0x1, 0x800})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {0x0}], 0x0, &(0x7f0000014a00))
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000140)=0x30)

03:37:57 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semop(r0, &(0x7f0000000040)=[{0x4, 0x8, 0x800}, {0x2, 0x3, 0x800}, {0x0, 0x1f}, {0x0, 0xa7ce, 0x800}], 0x4)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:37:57 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:57 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xfffffffffbffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0)
splice(r2, &(0x7f0000000000)=0x5, r1, &(0x7f0000000140)=0x80, 0x80, 0x2e052ff237c5caa1)
ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000180))
r3 = dup(r0)
ioctl$LOOP_CHANGE_FD(r3, 0x8901, 0xffffffffffffffff)

03:37:57 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:57 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0x2, 0x593, 0x5, 0xbc, 0x2, 0x93e, 0x0])
semop(r0, &(0x7f0000000040)=[{0x3, 0x8000, 0x1800}, {0x0, 0x1ff, 0x1800}, {0x1, 0x263e, 0x800}, {0x4, 0x6, 0x1000}, {0x3, 0x5, 0x800}, {0x4, 0x608c, 0x400}], 0x6)
r1 = semget(0x3, 0x3, 0x47)
semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000100)=""/140)
semctl$IPC_RMID(r0, 0x0, 0x0)
r2 = semget$private(0x0, 0x8, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x10)
semtimedop(r2, &(0x7f0000000080)=[{0x4, 0x3, 0x1800}, {0x3, 0x5, 0x800}, {0x0, 0x3, 0x1800}, {0x4, 0x5, 0x1800}, {0x2, 0x3d0, 0x800}], 0x5, &(0x7f00000001c0))
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:37:57 executing program 3:
r0 = socket(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002900)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000001200)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, 0x0}}], 0x2, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r1, &(0x7f0000000140)="bb4c0dfab230f3c4bcee137171306cbe3443e1a42bdcbb69e4344b25bd7268df764b4809143e4c4cf4ba15f0fb18b1b1059fb4e5bda65f4ff5330e3bf6437ba1c9e750fe89740370007977d37ad84e5cb87377edb17f66e667d92fba2e4205f857f14f24195842b8afe38c0618ef8b2a6d533afb39e4a0daaf60329fc5d0b9116665e746a536f47c4e890f96eb2a73d3e2e8a8bd2ba4ed2463196faf02f0aa092b4fb4ac801909d1b6c249196a968458ccebf3166c3d156b04382de3f4de7b61467b45ac5ef7", 0xc6, 0x4000000, &(0x7f0000000080)={0xa, 0x4e21, 0x829, @dev={0xfe, 0x80, '\x00', 0x20}, 0x1}, 0x1c)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)

[ 1545.286932][   T25] audit: type=1326 audit(2000000277.959:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4586 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0
03:37:58 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
socketpair(0x10, 0x20000000000001, 0x4, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYRES32, @ANYBLOB="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", @ANYRESOCT=r1, @ANYRES32, @ANYRESHEX=r3, @ANYRESOCT=r0, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4008884}, 0x40025)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000840)={0x4, 0x4, {0x1, @usage=0x8, 0x0, 0x1f, 0x9, 0x8, 0x9, 0x4, 0x8, @usage=0x3, 0x7, 0xa73c, [0x9, 0xbe88, 0x10000, 0x6, 0x8, 0xfff7ffff]}, {0xfffffffffffffffd, @struct={0x6, 0x6}, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x1000, 0x0, @usage=0x100, 0x8, 0x0, [0x6, 0x7, 0x3, 0x2, 0x3, 0x5]}, {0x1ff, @struct={0x5, 0xffffff80}, 0x0, 0xfffffffffffffffb, 0x4, 0x5, 0x6, 0x7fffffff, 0x0, @usage=0x8, 0x80000000, 0x3, [0x3, 0x0, 0x1000, 0x9, 0x0, 0x9]}, {0x1, 0x8, 0x2}})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm], 0x1)
r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0)
ftruncate(r5, 0x6)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
sendmmsg$sock(r4, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@mark={{0x14}}], 0x18}}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x810, r2, 0x65748000)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20010, r4, 0x31408000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1)

03:37:58 executing program 3:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
tkill(0xffffffffffffffff, 0x18)
r0 = gettid()
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
sendfile(r1, r2, 0x0, 0x800000080004103)
write$sndseq(r2, &(0x7f00000000c0), 0x0)
ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000000)={0xe3, 0x7})
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
r3 = gettid()
tkill(r3, 0x34)
r4 = getpgrp(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
r6 = getpgid(0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$unix(r5, &(0x7f00000074c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {r6, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r7]}}], 0x38}], 0x1, 0x0)
ptrace$cont(0x1f, r6, 0x2, 0x3)
kcmp(r4, r3, 0x5, r2, 0xffffffffffffffff)

03:37:58 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:58 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5428, &(0x7f0000000000)=0x13)

03:37:58 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:58 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(r3)
socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff, 0x400000}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:37:58 executing program 2:
r0 = memfd_create(&(0x7f0000000040)='[\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x90\x93\x12l\xb6Z\x95\xab\x00{\xe9\xc2Y\x01\x00\x81\x9eG\xf9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x8a\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\x95\xd2q#\xc6\xca\x97!*\x886Ka\x13\xf9\x0f\xb1{\xa6@\xf1\xcd\xd7\xdf< K\\\xb7\xa0\xfbf', 0x1)
write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x11)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x104, 0x1, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x200}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x80000001}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffffff77}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7110}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffff8}]}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xad}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffc}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x100}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x100000001}]}, 0x104}, 0x1, 0x0, 0x0, 0x4048000}, 0x40)

03:37:58 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(r3)
socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff, 0x400000}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:37:58 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:58 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:58 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x8}, {0x2, 0xb4, 0x1000}, {0x0, 0xb80e, 0x800}, {0x0, 0x0, 0x1400}, {0x3, 0x8, 0x800}, {0x3, 0x1, 0x1000}, {0x3, 0x1, 0x1000}, {0x2, 0xb}, {0x0, 0x20, 0x800}], 0x9, &(0x7f0000000280))
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
r1 = semget$private(0x0, 0x0, 0x420)
semctl$GETVAL(r1, 0x2, 0xc, &(0x7f00000000c0)=""/221)
r2 = semget$private(0x0, 0x4, 0x3c0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semop(r1, &(0x7f0000000240)=[{0x2, 0x9, 0x1000}, {0x273f54eccc23adab, 0x6}, {0x3, 0x81, 0x1800}, {0x2, 0x8001, 0x1000}, {0x4, 0x101, 0x1800}, {0x1, 0x800, 0x3000}, {0x2, 0x200, 0x1000}, {0x4, 0x4b4}], 0x8)
r3 = semget$private(0x0, 0x2, 0x4)
semop(r0, &(0x7f0000000200)=[{0x1, 0xec, 0x1000}], 0x1)
semop(r3, &(0x7f00000001c0)=[{0x3, 0x2, 0x1000}, {0x1, 0x5b8, 0x1000}, {0x2, 0x100, 0x1000}], 0x3)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:37:58 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(r3)
socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff, 0x400000}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:37:58 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
r1 = semget(0x0, 0x3, 0x80)
semop(r1, &(0x7f0000000140)=[{0x0, 0x6, 0x1000}, {0x1, 0xeb, 0x800}, {0x1, 0xc1, 0x1000}, {0x4, 0x2, 0x1000}, {0x0, 0x9}, {0x3, 0x4f69}, {0x1, 0x2}, {0x1, 0x1, 0x800}], 0x8)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
r2 = semget$private(0x0, 0x8, 0x0)
semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000180)=""/172)
semop(r2, &(0x7f00000000c0)=[{0x0, 0x5a73}, {0x4, 0x59f, 0x2800}, {0x4, 0x801f}, {0x1, 0x1, 0x800}, {0x0, 0x4, 0x2599f43fae79300b}, {0x0, 0x1ff}], 0x6)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x10)
semop(r2, &(0x7f0000000040)=[{0x3, 0xf811}], 0x1)
r3 = semget$private(0x0, 0x8, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r3, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r3, 0x0, 0x10)
semop(r3, &(0x7f0000000100)=[{0x0, 0x0, 0x800}, {0x2, 0x100, 0x1400}, {0x2, 0xfd}, {0x2, 0x3ff, 0x800}, {0x0, 0xb2e, 0x1000}, {0x4, 0x767a, 0x1800}, {0x4, 0x47, 0x1800}, {0x2, 0x1f}], 0x8)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:37:58 executing program 2:
set_mempolicy(0x2, &(0x7f0000000080)=0x8001, 0x3)
r0 = syz_io_uring_setup(0x70c4, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0xa89a1c1bd660819, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x0)
r3 = dup(r0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x1)
io_uring_enter(r3, 0x6700, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r5, 0x142f, 0x1cca, 0x0, &(0x7f0000000300)={[0x3]}, 0x8)
clock_gettime(0x0, &(0x7f00000001c0)={<r6=>0x0, <r7=>0x0})
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r8, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYBLOB="66666c746572000000000000000000000000000000000000000000000000000028000000ff5a023ff54e793d3153349021d3bed1f7d9e37d8cf5b1556dca81ec5fd7d3db1f0d436544cdbb4d"], &(0x7f00000003c0)=0x4c)
ppoll(&(0x7f00000000c0)=[{r0, 0x89}, {r3, 0x2060}, {r4, 0x1013}, {r3, 0xb1e8}], 0x4, &(0x7f0000000200)={r6, r7+60000000}, &(0x7f00000002c0)={[0x10000]}, 0x8)

03:37:58 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:59 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5437, &(0x7f0000000000)=0x13)

03:37:59 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(r3)
socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff, 0x400000}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:37:59 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:59 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)='\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
creat(&(0x7f0000000100)='./file1\x00', 0x55)
sendfile(r2, r1, 0x0, 0x100000004)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000004)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)

03:37:59 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:59 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:59 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(r3)
socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff, 0x400000}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:37:59 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040), 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:37:59 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:37:59 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{0x0, 0x7f}, {0x3, 0xf040, 0x1800}, {0x2, 0x1, 0x1800}, {0x0, 0x9}, {0x1, 0x8, 0x1800}, {0x1, 0xc6}, {0x2, 0xff, 0x800}, {0x1, 0x6, 0x800}], 0x8)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
semop(r0, &(0x7f0000000040)=[{0x2, 0x5, 0x2000}, {0x0, 0x2, 0x1800}], 0x2)

03:37:59 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(r3)
socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff, 0x400000}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:37:59 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(r3)
socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff, 0x400000}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:37:59 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5441, &(0x7f0000000000)=0x13)

03:37:59 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(r3)
socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff, 0x400000}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:37:59 executing program 5:
r0 = semget$private(0x0, 0x1, 0x214)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {0x4, 0x114, 0x800}, {0x1, 0x8002, 0x1000}], 0x5)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000000c0)=""/204)
semop(0x0, &(0x7f0000000000)=[{0x1, 0xc7d, 0x800}], 0x1)
r1 = semget(0x3, 0x0, 0x400)
semctl$IPC_RMID(r1, 0x0, 0x0)

03:38:00 executing program 2:
r0 = semget$private(0x0, 0x1, 0x214)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {0x4, 0x114, 0x800}, {0x1, 0x8002, 0x1000}], 0x5)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000000c0)=""/204)
semop(0x0, &(0x7f0000000000)=[{0x1, 0xc7d, 0x800}], 0x1)
r1 = semget(0x3, 0x0, 0x400)
semctl$IPC_RMID(r1, 0x0, 0x0)

03:38:00 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x800}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
clock_gettime(0x0, &(0x7f00000000c0)={<r1=>0x0, <r2=>0x0})
semtimedop(r0, &(0x7f0000000040)=[{0x99eb293e7d8e17e5, 0x1c1}, {0x2, 0x6, 0x1000}, {0x2, 0x4, 0x800}, {0x4, 0x3, 0x800}, {0x3, 0x4, 0x2800}, {0x0, 0x3f, 0x2800}, {0x3, 0x4}], 0x7, &(0x7f0000000100)={r1, r2+60000000})
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:00 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:00 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(r3)
socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff, 0x400000}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:38:00 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semtimedop(r1, &(0x7f0000000040), 0x0, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:00 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(r3)
socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff, 0x400000}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:38:00 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x27000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:00 executing program 2:
r0 = semget$private(0x0, 0x1, 0x214)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {0x4, 0x114, 0x800}, {0x1, 0x8002, 0x1000}], 0x5)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000000c0)=""/204)
semop(0x0, &(0x7f0000000000)=[{0x1, 0xc7d, 0x800}], 0x1)
r1 = semget(0x3, 0x0, 0x400)
semctl$IPC_RMID(r1, 0x0, 0x0)

03:38:00 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(r3)
socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff, 0x400000}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:38:00 executing program 2:
r0 = semget$private(0x0, 0x1, 0x214)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {0x4, 0x114, 0x800}, {0x1, 0x8002, 0x1000}], 0x5)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000000c0)=""/204)
semop(0x0, &(0x7f0000000000)=[{0x1, 0xc7d, 0x800}], 0x1)
r1 = semget(0x3, 0x0, 0x400)
semctl$IPC_RMID(r1, 0x0, 0x0)

03:38:00 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5450, &(0x7f0000000000)=0x13)

03:38:00 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:00 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(r3)
socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff, 0x400000}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:38:00 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
r1 = semget(0x3, 0x3, 0x210)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
semctl$IPC_RMID(0x0, 0x0, 0x10)
semctl$IPC_RMID(0x0, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setuid(r3)
statx(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2000, 0x80, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getresgid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)=<r5=>0x0)
semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000400)={{0x0, r3, 0xee01, r4, r5}, 0x3ff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0xfffd})
r6 = semget$private(0x0, 0x8, 0x0)
semop(r6, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r6, &(0x7f00000000c0)=[{0x0, 0x3ff, 0x1800}], 0x1, 0x0)
semctl$IPC_RMID(r6, 0x0, 0x10)
semop(r6, &(0x7f0000000040)=[{0x1, 0x71}, {0x3, 0x9}, {0x3, 0x6}, {0x2, 0x40, 0x1800}, {0x4, 0x9, 0x800}, {0x4, 0x1, 0x800}, {0x4, 0x5, 0x800}, {0x3, 0x800, 0x1000}], 0x8)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:00 executing program 2:
r0 = semget$private(0x0, 0x1, 0x214)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {0x4, 0x114, 0x800}, {0x1, 0x8002, 0x1000}], 0x5)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000000c0)=""/204)
semop(0x0, &(0x7f0000000000)=[{0x1, 0xc7d, 0x800}], 0x1)
semget(0x3, 0x0, 0x400)

03:38:00 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:01 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(r3)
socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff, 0x400000}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:38:01 executing program 2:
r0 = semget$private(0x0, 0x1, 0x214)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {0x4, 0x114, 0x800}, {0x1, 0x8002, 0x1000}], 0x5)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000000c0)=""/204)
semop(0x0, &(0x7f0000000000)=[{0x1, 0xc7d, 0x800}], 0x1)

03:38:01 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:01 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040))
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f0000000180)=[{0x4, 0x3b32, 0x800}], 0x1)
r2 = semget(0x3, 0x4, 0x82)
semop(r2, &(0x7f0000000100)=[{0x4, 0x9, 0x400}, {0x2, 0x101, 0x800}, {0x1, 0x4, 0x1000}, {0x1, 0x548, 0x400}, {0x7, 0xa6a0}, {0x5, 0x9, 0x1800}, {0x3, 0x0, 0x1000}, {0x0, 0x3, 0x1000}, {0x0, 0x6aa2, 0x1000}], 0x9)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f00000000c0)=[0x7f])
semop(r2, &(0x7f0000000140)=[{0x3, 0x1f92, 0x800}, {0x4, 0x3, 0x1800}, {0x0, 0x9, 0x1800}], 0x3)
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0xd, 0x0, 0x1, 0x8])

03:38:01 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(r3)
socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff, 0x400000}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:38:01 executing program 2:
r0 = semget$private(0x0, 0x1, 0x214)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {0x4, 0x114, 0x800}, {0x1, 0x8002, 0x1000}], 0x5)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000000c0)=""/204)

03:38:01 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:01 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5451, &(0x7f0000000000)=0x13)

03:38:01 executing program 2:
r0 = semget$private(0x0, 0x1, 0x214)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {0x4, 0x114, 0x800}, {0x1, 0x8002, 0x1000}], 0x5)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:01 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
semop(r0, &(0x7f0000000040)=[{0x3, 0x401, 0x1800}], 0x1)

03:38:01 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(r3)
socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff, 0x400000}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:38:01 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:01 executing program 2:
r0 = semget$private(0x0, 0x1, 0x214)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {0x4, 0x114, 0x800}, {0x1, 0x8002, 0x1000}], 0x5)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)

03:38:01 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(r3)
socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff, 0x400000}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:38:01 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:02 executing program 2:
r0 = semget$private(0x0, 0x1, 0x214)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {0x4, 0x114, 0x800}, {0x1, 0x8002, 0x1000}], 0x5)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:02 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(r3)
socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff, 0x400000}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:38:02 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:02 executing program 5:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x84800)
syz_io_uring_setup(0x495a, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x10001)
syz_io_uring_setup(0x1eb7, &(0x7f0000000340)={0x0, 0x703a, 0x8, 0x3, 0x19, 0x0, r0}, &(0x7f00006d4000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=<r3=>0x0)
syz_io_uring_submit(r1, r3, &(0x7f00000003c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)
syz_io_uring_setup(0x32ad, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
r6 = syz_io_uring_setup(0x76fb, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000400))
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000300)='./file0\x00', 0x18, 0x0, 0x0, {0x0, r7}}, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x2, 0x4004, @fd_index=0xa, 0xffff, &(0x7f00000000c0)="ad6e2f43877bfe1c0f6267d574b4dfc723c0345445ff0b647153d178491dcfde7654473c893784f5e80cc5a83d404cbbd38610867be21cf6f2287daee19f51ef64109dac5ab602bb8bea8788a3a6e089d5d9a0c56ce4a2218b4df4083b168788fa1fdeceeddb09e2eb0e05d449fc37b4bad6b00ceed5e07d36dfbc6b8cb03ded6c7c3654b8b988c356b429c237a483a8", 0x90, 0x2, 0x0, {0x0, r7}}, 0x5)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
r8 = semget$private(0x0, 0x8, 0x8)
semop(r8, &(0x7f0000000000), 0x0)
r9 = semget$private(0x0, 0x4, 0x40)
semctl$SETALL(r9, 0x0, 0x11, &(0x7f0000000080)=[0x204])
semtimedop(r8, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r8, 0x0, 0x10)

03:38:02 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5452, &(0x7f0000000000)=0x13)

03:38:02 executing program 2:
r0 = semget$private(0x0, 0x1, 0x214)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:02 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:02 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:02 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(r3)
socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff, 0x400000}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:38:02 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1, 0x0, 0x1000}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f0000000000), 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x200, 0x6, 0xff9e, 0x2])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:02 executing program 2:
r0 = semget$private(0x0, 0x1, 0x214)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:02 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7a020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:02 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(r3)
socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff, 0x400000}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:38:02 executing program 2:
r0 = semget$private(0x0, 0x1, 0x214)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:02 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(r3)
socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff, 0x400000}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:38:02 executing program 2:
semop(0x0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {0x4, 0x114, 0x800}, {0x1, 0x8002, 0x1000}], 0x5)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:03 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x545d, &(0x7f0000000000)=0x13)

03:38:03 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8cffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:03 executing program 2:
semop(0x0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {0x4, 0x114, 0x800}, {0x1, 0x8002, 0x1000}], 0x5)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:03 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(r3)
socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff, 0x400000}, 0x10)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:38:03 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semtimedop(r0, &(0x7f0000000040)=[{0x4, 0x20, 0x1c00}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700})
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:03 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
r1 = semget$private(0x0, 0x3, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)

03:38:03 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(r3)
socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff, 0x400000}, 0x10)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:38:03 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xefffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:03 executing program 2:
semop(0x0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {0x4, 0x114, 0x800}, {0x1, 0x8002, 0x1000}], 0x5)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:03 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(r3)
socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff, 0x400000}, 0x10)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:38:03 executing program 2:
r0 = semget$private(0x0, 0x0, 0x214)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {0x4, 0x114, 0x800}, {0x1, 0x8002, 0x1000}], 0x5)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:03 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf6030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:04 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5460, &(0x7f0000000000)=0x13)

03:38:04 executing program 2:
r0 = semget$private(0x0, 0x0, 0x214)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {0x4, 0x114, 0x800}, {0x1, 0x8002, 0x1000}], 0x5)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:04 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(r3)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:38:04 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf6ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:04 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf020}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:04 executing program 2:
r0 = semget$private(0x0, 0x0, 0x214)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {0x4, 0x114, 0x800}, {0x1, 0x8002, 0x1000}], 0x5)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:04 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(r3)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:38:04 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfc010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:04 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {0x4, 0x114, 0x800}, {0x1, 0x8002, 0x1000}], 0x5)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:04 executing program 5:
r0 = semget$private(0x0, 0x3, 0x413)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000003c0)=[0x200, 0x3])
semget(0x2, 0x2, 0x366)
semop(0x0, &(0x7f0000000380)=[{0x3, 0xfff, 0x1800}, {0x3, 0x3f, 0x1800}, {0x3, 0x4e, 0x1800}, {0x4, 0x401, 0x1800}, {0x1, 0x9e, 0x800}, {0x3, 0x6}, {0x0, 0x4}], 0x7)
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000280)=""/253)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r0, &(0x7f0000000040)=[{0x1, 0x3f, 0x1000}, {0x2, 0x5}, {0x5, 0x1000, 0x1000}], 0x3)
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
clock_gettime(0x0, &(0x7f0000000180)={<r2=>0x0, <r3=>0x0})
semctl$IPC_RMID(r0, 0x0, 0x0)
semtimedop(r0, &(0x7f0000000140)=[{0x0, 0x1, 0x3800}, {0x2, 0x0, 0x1000}, {0x2, 0x0, 0x800}, {0x0, 0x8, 0x1800}, {0x1, 0x8, 0x1400}], 0x5, &(0x7f00000001c0)={r2, r3+10000000})
semctl$GETZCNT(r0, 0x4, 0xf, &(0x7f00000000c0)=""/116)
semop(r0, &(0x7f0000000200)=[{0x0, 0x3f, 0x1000}, {0x0, 0x4}, {0x0, 0x3, 0x1000}, {0x3, 0x7, 0x1800}, {0x2, 0xcb, 0x800}, {0x0, 0x3, 0x1800}, {0x1, 0xfbff}], 0x7)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000240)=[0x3, 0x0])

03:38:04 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:04 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(r3)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:38:05 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x40049409, &(0x7f0000000000)=0x13)

03:38:05 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(0x0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {0x4, 0x114, 0x800}, {0x1, 0x8002, 0x1000}], 0x5)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:05 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:05 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(r3)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:38:05 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000400))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = inotify_init()
ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f00000000c0)={0x3, 0x3})
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
semop(r0, &(0x7f0000000040)=[{0x4, 0x5, 0x800}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:05 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(0x0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {0x4, 0x114, 0x800}, {0x1, 0x8002, 0x1000}], 0x5)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:05 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:38:05 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffff8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:05 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(0x0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {0x4, 0x114, 0x800}, {0x1, 0x8002, 0x1000}], 0x5)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:05 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0xffff])
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:05 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:38:05 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, 0x0, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:05 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x40086602, &(0x7f0000000000)=0x13)

03:38:05 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:05 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, 0x0, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:05 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:38:05 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040)=[{0x4, 0x3, 0x1000}, {0x3, 0x7ff, 0x800}, {0x4, 0x4, 0x2800}, {0x4, 0x5d, 0x1000}, {0x1, 0x1}], 0x5)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x3, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f00000000c0)=[{0x2, 0xea, 0x1000}, {0x1, 0x5, 0x1800}, {0x1, 0x9, 0x1000}, {0x3, 0x101, 0x800}, {0x1, 0x6, 0x1000}, {0x4, 0x100, 0x800}, {0x3, 0x3, 0x1000}, {0x1, 0x7f, 0x1000}, {0x0, 0x4, 0x800}], 0x9)
r2 = semget$private(0x0, 0x3, 0x1cc)
r3 = semget$private(0x0, 0x8, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r3, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r3, 0x0, 0x10)
semctl$IPC_RMID(r3, 0x0, 0x0)
semctl$GETPID(r2, 0x3, 0xb, &(0x7f0000000100)=""/66)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000180)=[{0x1, 0x80}, {0x2, 0x1, 0x1000}, {0x2, 0x4, 0x800}, {0x1, 0x9a4f, 0x1800}], 0x4, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:05 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
close(r3)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:38:05 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, 0x0, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:06 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:06 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {0x4, 0x114, 0x800}], 0x4)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

[ 1553.320467][ T5195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5195 comm=syz-executor.3
03:38:06 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semop(0xffffffffffffffff, &(0x7f0000000040)=[{0x2, 0x1ff, 0x2800}, {0x1, 0x5}, {0x1, 0x7f, 0x800}, {0x2, 0x7}], 0x4)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:06 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
close(r3)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:38:06 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1553.408980][ T5221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5221 comm=syz-executor.3
03:38:06 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x40087602, &(0x7f0000000000)=0x13)

03:38:06 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {0x4, 0x114, 0x800}], 0x4)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:06 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:06 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
close(r3)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:38:06 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:06 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {0x4, 0x114, 0x800}], 0x4)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:06 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000040)=[0x6, 0x8, 0x5, 0x81, 0x6fe7, 0x7, 0x6, 0x1])
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
r2 = semget$private(0x0, 0x1, 0x6)
semop(r2, &(0x7f0000000180)=[{0x0, 0x7, 0x1400}, {0x1, 0xfffd, 0x800}, {0x2, 0x2}, {0x2, 0x6, 0x800}, {0x4, 0x7, 0x800}, {0x2, 0x5, 0x400}, {0x3, 0xfff}], 0x7)
r3 = semget$private(0x0, 0x8, 0x0)
semtimedop(0x0, &(0x7f00000001c0)=[{0x2, 0x8, 0x800}, {0x0, 0xfff}, {0x0, 0xc2e, 0x49181c05b9431335}, {0x4, 0x200, 0x800}, {0x1, 0x8001, 0x1800}, {0x1, 0x2, 0x1000}, {0x2, 0x401, 0x800}, {0x1, 0x7, 0x800}, {0x0, 0x7fff, 0x1000}], 0x9, &(0x7f0000000200))
semop(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r3, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r3, 0x0, 0x10)
semctl$GETALL(r3, 0x0, 0xd, &(0x7f00000000c0)=""/137)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:06 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000001000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1554.216222][ T5243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5243 comm=syz-executor.3
03:38:06 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(r3)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:38:07 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:07 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {0x4, 0x114, 0x800}, {0x0, 0x8002, 0x1000}], 0x5)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:07 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f0000000140)=[{0x1, 0x3f, 0x1000}, {0x3, 0x2ad1, 0x800}, {0x3, 0xee0}], 0x3)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
r2 = semget$private(0x0, 0x8, 0x0)
semop(0x0, &(0x7f0000000100)=[{0x2, 0xd3a, 0x1000}, {0x2, 0xff}, {0x1, 0xb53}, {0x4, 0xa55, 0x1000}, {0x1, 0x20, 0x1000}, {0x0, 0x9, 0x800}, {0x5, 0x1000}, {0x2, 0x2, 0x1c00}], 0x8)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x10)
semtimedop(r2, &(0x7f0000000040)=[{0x4, 0x8, 0x1000}, {0x0, 0x7, 0x1000}, {0x0, 0x848, 0x1800}, {0x2, 0x101, 0x1800}, {0x3, 0x1, 0x800}, {0x1, 0x4, 0x800}], 0x6, &(0x7f00000000c0))

03:38:07 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x401c5820, &(0x7f0000000000)=0x13)

03:38:07 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {0x4, 0x114, 0x800}, {0x0, 0x0, 0x1000}], 0x5)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:07 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(r3)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:38:07 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:07 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {0x4, 0x114, 0x800}, {}], 0x5)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:07 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(r3)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:38:07 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0xa00, 0x64c])
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x9f70, 0x3131, 0x20, 0x73, 0x5, 0x6])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semop(r0, &(0x7f0000000040)=[{0x1, 0x1f, 0x800}, {0x2, 0x20, 0x1800}, {0x3, 0x8}, {0x0, 0x1}], 0x4)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:07 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:07 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {0x4, 0x114, 0x800}, {}], 0x5)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:07 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(0xffffffffffffffff)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0)

03:38:07 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:07 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r0, &(0x7f0000000180)=[{0x1, 0x1b0, 0x800}], 0x1)
semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000000c0)=""/162)
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semop(r0, &(0x7f0000000040)=[{0x2, 0x2}, {0x3, 0x1, 0x1000}, {0x2, 0x800, 0x800}, {0x1, 0x0, 0x1000}, {0x1, 0x0, 0x800}, {0x1, 0xe9, 0x1800}, {0x1, 0x2df2, 0x1800}, {0x3, 0x3, 0x1000}, {0x1, 0x8, 0x1400}], 0x9)
clock_gettime(0x0, &(0x7f0000000240)={<r1=>0x0, <r2=>0x0})
futex(&(0x7f0000000200)=0x2, 0x4, 0x0, &(0x7f0000000280)={r1, r2+60000000}, &(0x7f00000002c0), 0x1)
semctl$IPC_RMID(r0, 0x0, 0x10)
semop(r0, &(0x7f00000001c0)=[{0x3, 0xfff8}, {0x4, 0x3}], 0x2)

03:38:08 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x4020940d, &(0x7f0000000000)=0x13)

03:38:08 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {0x4, 0x114, 0x800}, {}], 0x5)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:08 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(0xffffffffffffffff)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0)

03:38:08 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:08 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {0x0, 0x0, 0x1000}], 0x4)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:08 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(0xffffffffffffffff)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0)

03:38:08 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
r1 = semget$private(0x0, 0x1, 0x110)
semop(r1, &(0x7f0000000040)=[{0x4, 0x4, 0x800}, {0x3, 0xa7d, 0x800}, {0x0, 0x7084, 0x1000}, {0x0, 0x74b, 0x1000}], 0x4)
semtimedop(r0, &(0x7f00000000c0), 0x0, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:08 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000010000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:08 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {}], 0x4)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:08 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[], 0xa)
close(r1)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x80000001, 0x0)

03:38:08 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:08 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040))
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:09 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x80045432, &(0x7f0000000000)=0x13)

03:38:09 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {}], 0x4)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:09 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[], 0xa)
close(r1)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x80000001, 0x0)

03:38:09 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:09 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x3, 0x5}, {}], 0x4)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:09 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[], 0xa)
close(r1)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x80000001, 0x0)

03:38:09 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {0x0, 0x0, 0x1000}], 0x3)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:09 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:09 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa)
close(r3)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

03:38:09 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040)=[{0x4, 0x101, 0x3000}, {0x3, 0x7, 0x1000}, {0x1, 0x3, 0x1000}, {0x2, 0x0, 0x800}, {0x6, 0x81, 0x800}, {0x2}], 0x6)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f0000000140)=[{0x0, 0x8000}, {0x2, 0x5, 0x1000}, {0x2, 0x1000, 0x800}, {0x3, 0x5, 0xc00}], 0x4)
semctl$IPC_RMID(r0, 0x0, 0x10)
semtimedop(r0, &(0x7f00000000c0)=[{0x2, 0x2, 0x1000}, {0x2, 0xed8, 0x1000}, {0x4, 0xffff}], 0x3, &(0x7f0000000100)={0x0, 0x3938700})

03:38:09 executing program 3:
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:09 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
r1 = semget(0x3, 0x2, 0x9)
semctl$IPC_RMID(r1, 0x0, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
semop(r1, &(0x7f0000000040)=[{0x3, 0x5, 0x800}, {0x1, 0x7, 0x4732d14feaec67d3}, {0x0, 0x7fff}, {0x0, 0x6b19, 0x1000}], 0x4)

03:38:10 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x80045440, &(0x7f0000000000)=0x13)

03:38:10 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {}], 0x3)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:10 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:10 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:10 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {}], 0x3)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:10 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x202000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:10 executing program 3:
pipe(0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[], 0xa)
close(r0)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000001, 0x0)

03:38:10 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x4, 0xf000, 0xb44a9c236e2f46e6}, {}], 0x3)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:10 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {0x0, 0x0, 0x1000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:10 executing program 0:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:10 executing program 3:
pipe(0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[], 0xa)
close(r0)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000001, 0x0)

03:38:10 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:11 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x80086601, &(0x7f0000000000)=0x13)

03:38:11 executing program 5:
fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=@ng={0x4, 0x11, "9bd8777a"}, 0x6, 0x2)
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:11 executing program 3:
pipe(0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[], 0xa)
close(r0)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000001, 0x0)

03:38:11 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:11 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:11 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:11 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:11 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:11 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:11 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:11 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x400}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040)=[{0x3, 0x1, 0x1800}, {0x1, 0x101, 0x1000}], 0x2, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
mmap(&(0x7f0000616000/0x1000)=nil, 0x1000, 0xb, 0x4000010, r3, 0x6754c000)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x80000)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x8)
mmap(&(0x7f00000d1000/0xf000)=nil, 0xf000, 0x0, 0x10, 0xffffffffffffffff, 0xbed1c000)
write(r2, &(0x7f0000000180)="002b59b8ed4f17d8cbe8ad2988bca9e389a7297a8fa4d54cb163f0b5aa700401594afa6d76e72ac9ff4991008f98c969f25e556339b6d557d53b8352fce846ec4aa968efe41eefef72d86b6fd34c3e873f1ed6c12f8f111e83d47eda570ae3cae3ba74daaf324d40e546a76a1b4fa7d918b91e997323466864c88029d39f893ea7df3fd4ec26fc97b8c85ec5a6c45664eedc21d1ed42177301bc57476721be292a4acb277b3df035716280f5707af3a0178f8e15100b8ceb55ddc93473e61602e8900a804ad585ec4d170810123ba1abfcda18f2bc492e92b83770f44701f9ac0b39e3", 0xe3)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:11 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:12 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x80087601, &(0x7f0000000000)=0x13)

03:38:12 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:12 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$GETZCNT(r0, 0x4, 0xf, &(0x7f0000000040)=""/61)
semctl$IPC_RMID(r0, 0x0, 0x10)
r1 = semget(0x1, 0x0, 0x2)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@mcast2, @in6=@ipv4={""/10, ""/2, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@private2}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8)
statx(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x31187ba94cfec498, 0x40, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000340)={{0x0, r2, r3, 0xee01, 0xee01, 0x4, 0x3}, 0xca9b, 0x20, 0x0, 0x0, 0x0, 0x0, 0x71})
semget$private(0x0, 0x1, 0x403)

03:38:12 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:12 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:12 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x900000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:12 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:12 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:12 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:12 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:12 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
r1 = semget(0x3, 0x1, 0x280)
semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000000c0)=""/179)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:12 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200), 0x0)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:13 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x801c581f, &(0x7f0000000000)=0x13)

03:38:13 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:13 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200), 0x0)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:13 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200), 0x0)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:13 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x2800}, {}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:13 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semctl$IPC_RMID(r1, 0x0, 0x0)
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semop(0xffffffffffffffff, &(0x7f0000000040)=[{0x2, 0x9ef, 0x800}, {0x3, 0x400}], 0x2)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:13 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:13 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{0x0}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:13 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:13 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{0x0}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:13 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:13 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f0000000040)=[{0x1, 0x2}, {0x4, 0x40, 0x1800}, {0x1, 0xbd, 0x1000}, {0x1, 0xd45, 0x1800}, {0x2, 0x5, 0x800}], 0x5)

03:38:14 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0xc0045878, &(0x7f0000000000)=0x13)

03:38:14 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{0x0}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:14 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:14 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:14 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:14 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:14 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:14 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
r1 = semget$private(0x0, 0x4, 0x400)
semtimedop(r1, &(0x7f0000000040)=[{0x1, 0x0, 0x1800}], 0x1, &(0x7f00000000c0)={0x77359400})
r2 = semget$private(0x0, 0x8, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x10)
semctl$IPC_RMID(r2, 0x0, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
semop(r1, &(0x7f0000000100)=[{0x4, 0xfff9, 0x800}], 0x1)

03:38:14 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:14 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:14 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:14 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:14 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0xc0045878, &(0x7f0000000000)=0x13)

03:38:14 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:14 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:14 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semtimedop(r1, &(0x7f0000000140)=[{0x3, 0x9, 0x1000}, {0x1, 0x200}, {0x2, 0x1, 0x1000}, {0x1, 0x40, 0x800}, {0x0, 0x5, 0x1000}, {0x4, 0x0, 0x800}, {0x0, 0x3}], 0x7, &(0x7f0000000180))
semop(r0, &(0x7f0000000040)=[{0x3, 0xff8, 0x800}, {0x1, 0x0, 0x800}, {0x1, 0x5, 0x1000}], 0x3)
semop(0x0, &(0x7f0000000100)=[{0x1, 0x9}, {0x4, 0x400, 0x1800}, {0x1, 0xe6, 0x1000}, {0x0, 0x3ff, 0x1800}, {0x4, 0xfff}, {0x3, 0x1f, 0x1800}, {0x1, 0x34, 0x2000}], 0x7)
semop(r0, &(0x7f00000000c0)=[{0x1, 0x9, 0x800}, {0x4, 0xfff7, 0x1000}, {0x2, 0x100}, {0x3, 0x9, 0x800}, {0x4, 0xfff7, 0x1000}, {0x3, 0x0, 0x800}], 0x6)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)

03:38:14 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:14 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00\x00\x00', 0x4}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:14 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:15 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semctl$IPC_RMID(r1, 0x0, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:15 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:15 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

03:38:15 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00\x00\x00', 0x4}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 1562.315916][ T5753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5753 comm=syz-executor.3
03:38:15 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x200])

[ 1562.392116][ T5771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5771 comm=syz-executor.3
03:38:15 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0xc0189436, &(0x7f0000000000)=0x13)

03:38:15 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:15 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00\x00\x00', 0x4}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 1563.157592][ T5794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5794 comm=syz-executor.3
03:38:15 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, 0x0)

03:38:15 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:15 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400", 0x6}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:15 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
r2 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r2, &(0x7f0000000240)="1c0000001200050f0c1000000049090000000a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvfrom$inet6(r2, &(0x7f0000000000)=""/114, 0x314aaee635b9c1b6, 0x0, 0x0, 0xfffffffffffffeeb)
write(0xffffffffffffffff, &(0x7f0000000000)="15000000140007", 0x7)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ffad000010", 0x5, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f010000000000000058230350b627ebfdc737d553952b3932b152badd3bfee06ddebb88f835b4f672e5eb20e369c9239cbfb2613fc371729a641387430326fe0c2e5c6b0caa6e915919a4b03de5ed0521d505bdefb69f6f351b2ae08f3f9bbdf4df197835177fb97c9cf4dbba8f"], 0x9, 0x0)
r3 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f0000000000)='-', 0x10a69, 0x10, 0x0, 0x4b6ae4f95a5de3b2)
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semtimedop(r1, &(0x7f0000000100)=[{0xb025e210e710a9e9, 0x1, 0x1800}], 0x1, &(0x7f0000000140)={0x0, 0x3938700})
semctl$IPC_RMID(r1, 0x0, 0x10)
semtimedop(r1, &(0x7f0000000040), 0x0, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:15 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400", 0x6}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:15 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, 0x0)

03:38:15 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:16 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f00000000c0)=[{0x4, 0x3, 0x1000}, {0x1, 0xff81}, {0x0, 0x8bc3, 0x800}], 0x3)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000040)=[0x401, 0x88])

03:38:16 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, 0x0)

[ 1563.392806][ T5836] netlink: 44141 bytes leftover after parsing attributes in process `syz-executor.0'.
03:38:16 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0xc020660b, &(0x7f0000000000)=0x13)

03:38:16 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:16 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400", 0x6}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:16 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:16 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x80045440, &(0x7f0000000000)=0x13)

03:38:16 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:16 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semtimedop(r1, &(0x7f0000000040)=[{0x3, 0x7ff, 0x1800}], 0x1, &(0x7f00000000c0))
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:16 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:16 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7a02000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:16 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x80045440, &(0x7f0000000000)=0x13)

[ 1564.164473][ T5863] netlink: 44141 bytes leftover after parsing attributes in process `syz-executor.0'.
03:38:16 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x800}, {0x3, 0xf002}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:16 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 1564.205848][ T5870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5870 comm=syz-executor.3
[ 1564.271489][ T5886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5886 comm=syz-executor.3
03:38:17 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x80045440, &(0x7f0000000000)=0x13)

03:38:17 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8cffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:17 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:17 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
r1 = semget(0x0, 0x0, 0x20)
semctl$IPC_RMID(r1, 0x0, 0x0)
semop(r1, &(0x7f0000000040)=[{0x3, 0x4, 0x1000}, {0x4, 0x4, 0x800}, {0x2, 0x81, 0x1800}, {0x1, 0x0, 0x800}], 0x4)
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:17 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
pipe(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc)
ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000200)={0x400, 0x7, 0x9, 0x200, 0x3, "4f30052b255827f4ab7954f45278d2a0b65074", 0x3791a1e7, 0x5})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
pipe(&(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x28000, 0x0)
r6 = getpid()
pipe(&(0x7f0000000240))
ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f0000000040)=r6)
ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f0000000000)=0x13)
fcntl$getownex(r4, 0x10, &(0x7f0000000180)={0x0, <r7=>0x0})
sched_setattr(r7, &(0x7f00000001c0)={0x38, 0x2, 0x2e, 0x3, 0x8, 0xffffffff, 0x7, 0xfc, 0x0, 0x8}, 0x0)
getgroups(0x8, &(0x7f00000003c0)=[0x0, 0xffffffffffffffff, 0x0, 0xee00, 0xffffffffffffffff, 0xee01, 0xee00, 0x0])
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x100)
fsetxattr$system_posix_acl(r1, &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000010004000000000002000000", @ANYRES32=0x0, @ANYBLOB="03b1cea47c4aad1648deea1cfb25d89b02000600", @ANYRES32=0x0, @ANYBLOB="040004000000000010000500000000002000050000000000"], 0x34, 0x1)

03:38:17 executing program 2:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semtimedop(r1, &(0x7f0000000040), 0x0, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

[ 1564.954748][ T5908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5908 comm=syz-executor.3
03:38:17 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
r1 = semget(0x0, 0x0, 0x9)
semctl$IPC_RMID(r1, 0x0, 0x0)
semop(r0, &(0x7f0000000040)=[{0x4, 0x3, 0x1800}, {0x3, 0x4100, 0x800}, {0x1, 0x0, 0x1400}, {0x7, 0x7, 0x1000}], 0x4)
semop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf002}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r0, &(0x7f00000000c0)=[{0x3, 0x6, 0x1800}, {0x3, 0x0, 0x3800}, {0x2, 0x8, 0x1000}, {0x4, 0x9, 0x800}, {0x0, 0x3f, 0x800}, {0x2, 0x6, 0x1000}], 0x6)
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:17 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:17 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, 0x0, 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:17 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:17 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, 0x0, 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:17 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf603000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:17 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
r1 = semget(0x3, 0x0, 0x0)
semctl$SEM_STAT_ANY(r1, 0x0, 0x14, &(0x7f0000000100)=""/196)
r2 = semget(0x0, 0x2, 0x1)
semop(r2, &(0x7f0000000040)=[{0x0, 0x7, 0x800}, {0x3, 0x4, 0x1000}, {0x1, 0x3, 0x1800}, {0x3, 0x4, 0x1000}, {0x5, 0x0, 0x800}], 0x5)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
semop(r0, &(0x7f00000000c0)=[{0x4, 0x1ff, 0x1400}, {0x2, 0x401}, {0x7, 0x5, 0x800}], 0x3)
r3 = semget$private(0x0, 0x8, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r3, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r3, 0x0, 0x10)
semctl$GETZCNT(r3, 0x1, 0xf, &(0x7f0000000200)=""/50)

[ 1565.096831][ T5934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5934 comm=syz-executor.3
03:38:17 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, 0x0, 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:17 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf6ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1565.179884][ T5951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5951 comm=syz-executor.3
[ 1565.222217][ T5961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5961 comm=syz-executor.3
03:38:18 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0)
semop(0xffffffffffffffff, &(0x7f0000000040)=[{0x4, 0x6, 0x1000}, {0x0, 0x4, 0x1000}, {0x2, 0xf000, 0x800}, {0x1, 0x7ff, 0x1000}, {0x2, 0x4, 0x800}, {0x7, 0x6, 0x800}, {0x3, 0x8001}, {0x4, 0x2, 0x1000}], 0x8)

03:38:18 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfc01000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:18 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(0xffffffffffffffff)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:18 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x998, 0x1, 0xcd26, 0x7f, 0x4, "caf3973d8d31c0a94cb1d4234737d525833159", 0x5, 0x2})
syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:18 executing program 2 (fault-call:2 fault-nth:0):
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:18 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfeffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:18 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:18 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(0xffffffffffffffff)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:18 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:18 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x201])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:18 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x3, 0x11, &(0x7f0000000080))

03:38:18 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(0xffffffffffffffff)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:19 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x8000, 0x4, 0x7, 0x9, 0x8, 0x4, 0x3, 0x80])
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
semtimedop(r0, &(0x7f00000000c0)=[{0x4, 0x401}, {0x6, 0x400, 0x800}], 0x2, &(0x7f0000000140)={r1, r2+60000000})
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:19 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:19 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:19 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x0, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:19 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x300, 0x11, &(0x7f0000000080))

03:38:19 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:19 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x0, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:19 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x1000000, 0x11, &(0x7f0000000080))

03:38:19 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:19 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x0, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:19 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x3000000, 0x11, &(0x7f0000000080))

03:38:19 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1566.973920][ T6088] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1566.982292][ T6088] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:38:20 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semop(r0, &(0x7f0000000140)=[{0x1, 0x40, 0x1800}, {0x4, 0x9b, 0x800}, {0x2, 0x3, 0x800}, {0x1, 0x0, 0x1800}, {0x4, 0x6, 0x1800}, {0x4, 0xffff, 0x1800}, {0x2, 0x2, 0x1000}], 0x7)
clock_gettime(0x0, &(0x7f00000000c0)={<r1=>0x0, <r2=>0x0})
semtimedop(r0, &(0x7f0000000040)=[{0x1, 0xd3, 0x2000}, {0x1, 0x6, 0x1800}, {0x1, 0x101, 0x800}, {0x4, 0x1}, {0x2, 0x5, 0x1000}, {0x0, 0x8001, 0x800}, {0x2, 0x4, 0x1800}], 0x7, &(0x7f0000000100)={r1, r2+10000000})
semctl$IPC_RMID(r0, 0x0, 0x10)
r3 = semget(0x3, 0x4, 0x4)
semop(r3, &(0x7f0000000180)=[{0x0, 0x1ff}, {0x4, 0x57, 0x3800}], 0x2)

03:38:20 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semop(r0, &(0x7f0000000040)=[{0x4, 0x2, 0x1400}, {0x4, 0xa65, 0x800}, {0x4, 0x5, 0x800}, {0x4, 0x2}, {0x0, 0x7fff, 0x800}, {0x1, 0x4, 0x800}, {0x2, 0x20, 0x1000}, {0x0, 0x9, 0x800}], 0x8)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x1fc])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
semop(r0, &(0x7f00000000c0)=[{0x3, 0x3}, {0x3, 0x4, 0x1000}, {0x3, 0xbe, 0x1000}, {0x3, 0x1, 0x1800}], 0x4)
r1 = semget$private(0x0, 0x8, 0x0)
r2 = semget(0x0, 0x0, 0x490)
semtimedop(r2, &(0x7f0000000200)=[{0x1, 0x4, 0x1000}, {0x2, 0x0, 0x1800}, {0x1, 0x7fff, 0x1800}, {0x1, 0x5, 0x800}, {0x3, 0xff00, 0xc00}], 0x5, &(0x7f0000000240)={0x77359400})
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semop(r0, &(0x7f00000001c0)=[{0x1, 0xfc01}], 0x1)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
clock_gettime(0x0, &(0x7f0000000140)={<r3=>0x0, <r4=>0x0})
semtimedop(r1, &(0x7f0000000100)=[{0x6, 0x8}, {0x0, 0xdb, 0x800}, {0x2, 0x0, 0x800}, {0x3, 0xfe, 0x1800}], 0x4, &(0x7f0000000180)={r3, r4+10000000})

03:38:20 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x100000000000000, 0x11, &(0x7f0000000080))

03:38:20 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:20 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:20 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000100))
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000140)=0x13)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc)
ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000180)={0x200, 0x3c, 0x213, 0x7fffffff, 0x6, "b75ae63dbcf0c8c0aef6285eb730ab68348f66", 0x6, 0x7})
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r1, &(0x7f00000000c0)="b4", 0xfdef)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f0000000000)=0x13)

03:38:20 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:20 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x300000000000000, 0x11, &(0x7f0000000080))

03:38:20 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0xffffffff00000000, 0x11, &(0x7f0000000080))

03:38:20 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 1567.727753][ T6113] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1567.736241][ T6113] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:38:20 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x2, &(0x7f0000000080))

03:38:20 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:21 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x20000, 0x0, "00000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x4a0400, 0x0)
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000004c0)={0x800, 0x87, 0x6, 0x6, 0x2, [{0x6, 0x8, 0x11b, '\x00', 0x82}, {0x8, 0x100, 0x35, '\x00', 0x1}]})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)
write(r0, &(0x7f0000000180)="cd4aae6e3bd6133e5bb450f08b5ec1ca6a5c4b0e781982c9650e5658123f83c99a83b916baff6747c36d0321e69412d209bffa6f197e51795d5dca42abc806edb06d9ec37bf48148ec285886b4aad2365c40e5425dfe91d75f8637bfc7bcb426da383a6551a507f66e524d8cb0f52c3ecace8b1d68d564d84dd86c8b95bb90cb7c9f449ae9a9017ac5ac62361acadc13e29e926b83e8548d0a695608c278f8d90c113567b09a933d4c195c9cdc77f89f1b443af33f52fbb616d1ec292e339c7a3ea0296d67fcb85a68372c78369399515df93b397904741f8ce9a21fba111ffb2593a02f0a4c531bde2912aa44d8d626527a2d3520fa947d", 0xf8)
ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000280)={0x2e, "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"})

03:38:21 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:21 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:21 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x3, &(0x7f0000000080))

03:38:21 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:21 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0xb, &(0x7f0000000080))

03:38:21 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040)=[{0x2, 0x206c}, {0x4, 0x6, 0x800}, {0x0, 0xfd79}, {0x3, 0x2, 0x1400}], 0x4)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semctl$SEM_STAT(r1, 0x1, 0x12, &(0x7f0000000100)=""/157)
semop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(0x0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x10)
semtimedop(0x0, &(0x7f0000000200)=[{0x0, 0x6, 0x1000}, {0x3, 0x200, 0x1000}], 0x2, &(0x7f0000000240)={0x77359400})
semop(r0, &(0x7f00000001c0)=[{0x3, 0x7f}, {0x3, 0x8, 0x1000}, {0x0, 0x3, 0x800}, {0x0, 0x4, 0x1000}, {0x1, 0x8, 0x1800}, {0x2, 0x5, 0x800}, {0x1, 0xa3b, 0x1000}], 0x7)
r2 = semget$private(0x0, 0x0, 0x30)
semop(r2, &(0x7f00000000c0)=[{0x0, 0x0, 0x1800}, {0x1, 0x48, 0x1000}], 0x2)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:21 executing program 4:
flock(0xffffffffffffffff, 0x8)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
r1 = signalfd4(r0, &(0x7f0000000000)={[0x8001]}, 0x8, 0x800)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x5)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00", 0x0, 0x4})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
syz_open_dev$tty20(0xc, 0x4, 0x1)

[ 1568.726632][ T6165] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1568.735017][ T6165] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:38:21 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0xc, &(0x7f0000000080))

03:38:21 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180), 0x0)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:21 executing program 0:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x8, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4)
r2 = semget$private(0x0, 0x8, 0x0)
semop(r2, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r2, &(0x7f0000000040)=[{0x3, 0x2, 0x1c00}, {0x6, 0x9}, {0x0, 0x63, 0xc0a36a9341fd0174}], 0x3, 0x0)
r3 = semget(0x1, 0x0, 0x102)
r4 = semget$private(0x0, 0x8, 0x0)
semop(r4, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r4, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r4, 0x0, 0x10)
semtimedop(r4, &(0x7f00000000c0)=[{0x3, 0xffda, 0x800}, {0x3, 0x5, 0x800}], 0x2, &(0x7f0000000100)={0x77359400})
semget$private(0x0, 0x1, 0x21)
semctl$IPC_RMID(r3, 0x0, 0x10)

03:38:21 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0xd, &(0x7f0000000080))

03:38:21 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180), 0x0)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:21 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:21 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0xe, &(0x7f0000000080))

03:38:21 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180), 0x0)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:21 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:21 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0xf, &(0x7f0000000080))

[ 1569.402044][ T6217] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1569.410427][ T6217] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:38:22 executing program 5:
getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_to_team\x00', <r1=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6_vti0\x00', r1, 0x4, 0x0, 0xff, 0x2, 0x20, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x88, 0x80, 0x58, 0x200}})
r2 = semget$private(0x0, 0x8, 0x0)
semop(r2, &(0x7f0000000100)=[{0x0, 0x101, 0x800}, {0x3, 0xf000, 0x1000}], 0x2)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x10)

03:38:22 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:22 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:22 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x10, &(0x7f0000000080))

03:38:22 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={<r1=>0xffffffffffffffff, 0x7, 0x7e80b251, 0x8})
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000000c0)={0x51, 0xfff7, 0x7, {0x7, 0x8}, {0x80, 0x7}, @cond=[{0x3, 0x152d, 0x100, 0x1000, 0x67af, 0x7}, {0x3ff, 0x0, 0x5e59, 0x400, 0x9}]})

03:38:22 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x12, &(0x7f0000000080))

03:38:22 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:22 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:22 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f40700", 0xd)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:22 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x13, &(0x7f0000000080))

03:38:22 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f40700", 0xd)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:22 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x14, &(0x7f0000000080))

[ 1570.089854][ T6262] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1570.098210][ T6262] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:38:23 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f40700", 0xd)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:23 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:23 executing program 2:
r0 = semget$private(0x0, 0x2, 0x140)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:23 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1570.781941][ T6307] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1570.790471][ T6307] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:38:23 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
r1 = semget(0x2, 0x2, 0x81)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x40af])
semtimedop(r1, &(0x7f0000000040), 0x0, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:23 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
r1 = semget$private(0x0, 0x8, 0x0)
r2 = semget$private(0x0, 0x4, 0x40)
semop(r2, &(0x7f0000000040)=[{0x4, 0x39d, 0x1800}, {0x0, 0x3ff, 0x1800}], 0x2)
semop(r1, &(0x7f0000000000)=[{0x2, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f0000000000)=[{0x4, 0x4d, 0x1800}, {0x2, 0xd7f, 0x1000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:23 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000", 0xf)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:23 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:23 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semctl$GETPID(r1, 0x1, 0xb, &(0x7f00000000c0)=""/4096)
r2 = semget$private(0x0, 0x3, 0x100)
semop(r2, &(0x7f0000000080)=[{0x4, 0xd94d, 0x400}, {0x1, 0x81, 0x800}, {0x3}, {0x1, 0x5, 0x1800}, {0x2, 0x4362}], 0x5)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:23 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000", 0xf)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:23 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000", 0xf)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:23 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xffffffc5, 0xfffffffd, 0x0, 0x400, 0x97, "93ba84d9ff000000000000000000000000e5ff"})
ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000040)={0x1ba, 0x13, &(0x7f0000000180)="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"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:23 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f40700000000", 0x10)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:23 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:23 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f40700000000", 0x10)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:24 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f40700000000", 0x10)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 1571.316587][ T6350] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1571.316605][ T6350] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:38:24 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semop(r0, &(0x7f00000001c0)=[{0x4, 0x0, 0x800}, {0x3, 0x5, 0x1800}, {0x4, 0x80}, {0x2, 0x2, 0x1000}, {0x1, 0x7}, {0x0, 0x800, 0x1000}], 0x6)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80c00)
fstatfs(r1, &(0x7f00000000c0)=""/205)

03:38:24 executing program 5:
r0 = socket$inet6(0xa, 0x80000, 0x6)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f00000000c0)=""/233, 0xe9}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/118, 0x76}, {&(0x7f0000001240)=""/226, 0xe2}, {&(0x7f0000001340)=""/151, 0x97}, {&(0x7f0000001400)=""/245, 0xf5}, {&(0x7f0000001500)=""/171, 0xab}], 0x7, 0x4, 0x8)
ioctl$FITHAW(r0, 0xc0045878)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x0, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)

03:38:24 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x8000, 0x2, 0x0, 0x0, "0000006223e6951e38ef6100ddff0fddff00", 0x7fffffff})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)
sendfile(r1, r1, &(0x7f0000000040)=0x5, 0x3f)

03:38:24 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:24 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:24 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:24 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x2, 0x7, 0x1000}, {0x1, 0xf9c8}], 0x2)
semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x2, 0x1800}], 0x1, &(0x7f0000000080))
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040))

03:38:24 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 1572.149381][ T6387] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1572.157793][ T6387] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:38:24 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00')
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:24 executing program 2:
r0 = semget$private(0x0, 0x1, 0x222)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
semtimedop(r0, &(0x7f0000000000)=[{0x3, 0x7, 0x1000}, {0x0, 0x2, 0x1000}, {0x0, 0xfff, 0x1000}, {0x3, 0x0, 0x1000}, {0x2, 0x3, 0x800}, {0x4, 0x4, 0x800}, {0x4, 0x3, 0x1c00}, {0x4, 0x1ff, 0x800}, {0x1, 0x9, 0x1000}, {0x1, 0x8443, 0x400}], 0xa, &(0x7f00000000c0)={r1, r2+10000000})
clock_nanosleep(0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180))
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
r3 = semget(0x1, 0x0, 0x400)
semop(r3, &(0x7f0000000100)=[{0x1, 0x8, 0x1800}, {0x1, 0x0, 0x1000}, {0x2, 0x8, 0x1000}, {0x0, 0x5}, {0x4, 0xff, 0x1000}, {0x0, 0x7d57, 0x1800}, {0x0, 0x101, 0x1800}, {0x3, 0x7}, {0x0, 0x8000, 0x1000}], 0x9)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:24 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:25 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:25 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000), 0x0)
semop(0xffffffffffffffff, &(0x7f0000000100)=[{0x2, 0x0, 0x800}, {0x2, 0x3f}, {0x1, 0xfffd, 0x1000}, {0x6, 0x7ff, 0x1800}], 0x4)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x8000, 0x800}, {0x1, 0x1}], 0x2, &(0x7f00000000c0)={0x77359400})
semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}, {0x3, 0x3f}], 0x2, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:25 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
fstat(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setreuid(0xee00, r3)
ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x0)
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:25 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:25 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:25 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:25 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x0, "000200001dbb5352c862cd32b3b600"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
tee(r0, r0, 0x7, 0xd4f3a52a1a36294e)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:25 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semtimedop(r1, &(0x7f0000000040)=[{0x4, 0x3, 0x1800}, {0x0, 0x0, 0x800}, {0x2, 0xfffe, 0x1000}, {0x0, 0x334e, 0x800}, {0x0, 0x0, 0x1800}, {0x0, 0x8, 0x3800}, {0x1, 0x343}], 0x7, &(0x7f00000000c0)={0x77359400})

03:38:25 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setreuid(r1, r2)
r3 = semget$private(0x0, 0x1, 0x0)
semop(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semop(r3, &(0x7f0000000100)=[{0x3, 0x20, 0x1000}, {0x2, 0x5, 0x1800}, {0x2, 0x7}, {0x0, 0x9, 0x1000}], 0x4)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080))

03:38:25 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:25 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0xffeff1b7, 0x0, 0x0, 0x0, 0x0, "00001de553c80000000000000010ddfe00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x80)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000040))
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000000)=0x13)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
ioctl$KIOCSOUND(r3, 0x4b2f, 0x7)

[ 1573.107826][ T6456] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1573.116183][ T6456] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:38:25 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600), 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:25 executing program 2:
r0 = semget$private(0x0, 0x4, 0xc0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
semctl$GETVAL(r0, 0x4, 0xc, &(0x7f0000000000)=""/59)

03:38:26 executing program 2:
r0 = semget$private(0x0, 0xa25629e11b3acd1d, 0x400)
semop(r0, &(0x7f0000000080)=[{0x1, 0x3, 0x1000}, {0x4, 0xa2, 0x3800}, {0x1, 0x5, 0x1000}, {0x2, 0x4, 0x800}], 0x4)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x6, 0x67, 0x7f, 0x8001, 0x9, 0x8, 0xffff])

03:38:26 executing program 5:
r0 = semget$private(0x0, 0x8, 0x11)
semctl$IPC_RMID(r0, 0x0, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:26 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
r1 = semget$private(0x0, 0x3, 0x10)
semop(r1, &(0x7f0000000000)=[{0x4, 0x8, 0x1000}, {0x4, 0x8, 0x1800}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
r2 = semget(0x0, 0x2, 0x8)
semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000080)=""/77)

03:38:26 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600), 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:26 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:26 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
clock_gettime(0x7, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xa, 0x800}, {0x4, 0x0, 0x800}, {0x1, 0x4}, {0x1, 0x3, 0x1800}], 0x4, &(0x7f00000000c0)={r1, r2+10000000})
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:26 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
r1 = semget(0x3, 0x1, 0x0)
semop(r1, &(0x7f0000000040)=[{0x2, 0x4, 0x800}, {0x3, 0x3, 0x1800}, {0x2, 0x9, 0x1000}], 0x3)
semtimedop(r0, &(0x7f00000000c0)=[{0x1, 0x80, 0x1400}], 0x1, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:26 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600), 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:26 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f0000000040)=[{0x4, 0x3ff, 0x1800}, {0x0, 0xf16, 0x1800}, {0x1, 0x2, 0x800}, {0x1, 0xe2, 0x1800}], 0x4)
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

[ 1573.953135][ T6518] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1573.961866][ T6518] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:38:26 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{}, {}]})
r1 = syz_open_pts(r0, 0x501)
syz_open_pts(r1, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0xc00, 0x0)
r2 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0)
r3 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0)
r4 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
fsetxattr$trusted_overlay_opaque(r7, &(0x7f00000001c0), &(0x7f0000000200), 0x2, 0x3)
ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f0000000000)=0x13)

03:38:26 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{0x0}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:26 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semctl$GETVAL(r0, 0x1, 0xc, &(0x7f0000001140)=""/95)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
r1 = semget$private(0x0, 0x0, 0x40)
r2 = semget$private(0x0, 0x8, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x101, 0x1000}, {0x4, 0x5, 0x1000}, {0x0, 0x7fff, 0x800}], 0x3)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
r3 = semget$private(0x0, 0x0, 0x4f5)
r4 = semget$private(0x0, 0x2, 0x1)
r5 = semget$private(0x0, 0x0, 0x4)
semctl$SETALL(r5, 0x0, 0x11, &(0x7f00000011c0)=[0x20, 0x7f, 0x7, 0x7af1, 0x7, 0x7, 0x4, 0x3, 0x7, 0x800, 0x2, 0x7ffd, 0x3, 0x1f])
semop(r4, &(0x7f0000001140), 0x0)
semtimedop(r3, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r3, 0x0, 0x10)
semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000140)=""/4088)
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
r6 = semget$private(0x0, 0x3, 0x200)
semop(r6, &(0x7f0000000100)=[{0x3, 0x8, 0x800}, {0x3, 0x7}], 0x2)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080))

03:38:27 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{0x0}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:27 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0xce, 0x80, 0x9])

03:38:27 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{0x0}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:27 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000000)=[{0x1, 0x0, 0x1000}, {0x4, 0xd14, 0x800}], 0x2)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
r1 = semget(0x1, 0x3, 0x17)
semop(r1, &(0x7f0000000080)=[{0x2, 0x6, 0x3800}, {0x0, 0x100, 0x1000}, {0x1, 0x0, 0x800}, {0x3, 0xffff, 0xc00}], 0x4)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:27 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:27 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 1574.575864][ T6582] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1574.584430][ T6582] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:38:27 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
r1 = semget(0x1, 0x4, 0x210)
r2 = semget(0x3, 0x4, 0x11)
semctl$IPC_RMID(r1, 0x0, 0x0)
semop(r2, &(0x7f0000000040)=[{0x2, 0x8}, {0x0, 0x101, 0x800}, {0x3, 0x3f, 0x1000}, {0x2, 0x6, 0x1c00}, {0x3, 0x0, 0x800}, {0x0, 0x7, 0x2000}], 0x6)

03:38:27 executing program 2:
setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000000)=0x2, 0x4)
r0 = semget$private(0x0, 0x1, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
r3 = semget$private(0x0, 0x8, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r3, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r3, 0x0, 0x10)
semop(r3, &(0x7f0000000180)=[{0x3, 0x8, 0x800}, {0x1, 0x1, 0x1800}, {0x3, 0x2c, 0x1800}, {0x2, 0xffff, 0x1000}, {0x0, 0x5, 0x1800}, {0x1, 0x8f, 0x1800}], 0x6)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000090)
semop(r0, &(0x7f0000000040), 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:27 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semop(r0, &(0x7f0000000040)=[{0x0, 0x996, 0x1800}, {0x2, 0x2, 0x800}, {0x2, 0x5, 0x1000}, {0x3, 0x2, 0x1800}], 0x4)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:27 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:27 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:27 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:27 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:27 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693", 0x4}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 1575.049286][ T6622] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1575.057759][ T6622] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:38:27 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693", 0x4}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:28 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693", 0x4}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:28 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce69", 0x6}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:28 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce69", 0x6}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:28 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:28 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce69", 0x6}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:28 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semctl$IPC_RMID(r1, 0x0, 0x10)

03:38:28 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
r1 = semget(0x1, 0x0, 0x441)
semctl$IPC_RMID(r1, 0x0, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:28 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:28 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x7, 0x4000, 0x100, 0x4, "020000001dc32e52370000bd00000010ddff00", 0xffffffff, 0x3})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x20)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x4, 0x5, 0x3088f59d, 0xfff, 0x1f, "cea2f9b20c9bb808ebad12141024a45b1ad80f", 0x7ff, 0x4})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f0000000000)=0x13)
r4 = openat(r2, &(0x7f0000000180)='./file0\x00', 0x50000, 0x2)
ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f00000001c0))

[ 1575.806487][ T6665] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1575.815480][ T6665] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:38:28 executing program 5:
r0 = semget$private(0x0, 0x8, 0x563)
r1 = semget(0x2, 0x4, 0x104)
semctl$IPC_RMID(r1, 0x0, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
r2 = semget$private(0x0, 0x8, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x10)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000040)=[0xc690, 0x7, 0x8001, 0x6, 0x4, 0x3, 0x8001])
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:28 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:28 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f0000000000)=[{0x0, 0x400, 0x800}, {0x0, 0xab1f}, {0x1, 0x7ff, 0x1000}, {0x3, 0x6, 0x1800}, {0x2, 0x7}, {0x3, 0x5, 0x1000}, {0x4, 0xfffa}], 0x7)

03:38:28 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:28 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040))
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000100))
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:28 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, 0x0, 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:28 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:29 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, 0x0, 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:29 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
r1 = semget(0x3, 0x1, 0x10)
semop(r1, &(0x7f0000000040)=[{0x2, 0x2, 0x1000}, {0x4, 0x9, 0x1000}, {0x4, 0x1f}, {0x0, 0x9, 0xc2234f26ec05190}, {0x1, 0x101, 0x800}, {0x2, 0x1fd, 0x400}], 0x6)

03:38:29 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:29 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, 0x0, 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:29 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
write(r1, &(0x7f00000000c0)="3dac68b650080f190699e536e64d4b1e1225e5116838c673ddd3b08eaa74f661679e5f5b15301b5e8811824ff3b339b4d77e92323ff84a8a2a094b33", 0x3c)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000000)=0x13)

03:38:29 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
semop(r0, &(0x7f0000000040), 0x0)

03:38:29 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x40)

03:38:29 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
r1 = semget$private(0x0, 0x2, 0x140)
semop(r1, &(0x7f0000000000)=[{0x0, 0xef, 0x1000}, {0x2, 0xb}, {0x3, 0x4, 0x1000}, {0x4, 0x400, 0x1000}, {0x1, 0x8, 0x1000}, {0x3, 0x3, 0x800}, {0x2, 0x9, 0xc00}], 0x7)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:29 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:29 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:29 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:29 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:29 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:30 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:30 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
r2 = semget$private(0x0, 0x8, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x10)
semctl$IPC_RMID(r2, 0x0, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f0000000000)=[{0x1, 0x1, 0x1800}, {0x4, 0x9, 0xc00}, {0x3, 0x101, 0x800}], 0x3)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:30 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:30 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
r1 = semget(0x0, 0x2, 0xa0)
semtimedop(r1, &(0x7f0000000040), 0x55, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:30 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x0, 0x1ff, 0x20, 0x4, 0x6, "6dc868e6384c82c83c562e1c0a6c9005e298fd", 0x401, 0x1})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000180)=""/149)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:30 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semctl$IPC_RMID(r1, 0x0, 0x10)
semtimedop(r1, &(0x7f0000000040), 0x1f, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
semop(r0, &(0x7f0000000040)=[{0x1, 0x4b9, 0x1800}], 0x1)
r2 = semget$private(0x0, 0x8, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x10)
semctl$GETNCNT(r2, 0x4, 0xe, &(0x7f00000000c0)=""/107)

03:38:30 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:30 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:30 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:30 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:30 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:30 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:30 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0xffff, 0x0, 0x0, "001800ddff00e9ffffff4624f9ffffffffffff"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0)
preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/28, 0x1c}, {&(0x7f0000000180)=""/137, 0x89}, {&(0x7f0000000240)=""/174, 0xae}, {&(0x7f0000000300)=""/225, 0xe1}], 0x4, 0x8, 0x3)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000000)=0x13)

03:38:31 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
r1 = semget(0x0, 0x2, 0x4)
semop(r1, &(0x7f0000000000)=[{0x4, 0x3, 0x1000}, {0x4, 0xc45, 0x800}, {0x0, 0x0, 0x800}], 0x3)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:31 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:31 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:31 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000040))
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000000)=0x13)

03:38:31 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000880), r0)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r1, 0xf25}, 0x14}}, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x3, 0x7, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x408d0}, 0x40000000)
r2 = semget$private(0x0, 0x8, 0x0)
semop(r2, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x10)
r3 = semget$private(0x0, 0x1, 0x6a5)
clock_gettime(0x0, &(0x7f00000000c0)={<r4=>0x0, <r5=>0x0})
r6 = semget$private(0x0, 0x4, 0x0)
semop(r6, &(0x7f0000000140)=[{0x4, 0x9, 0x800}, {0x3, 0x9, 0x800}, {0x4, 0x8001, 0x800}, {0x0, 0x8, 0x1000}, {0x4, 0xff, 0x400}, {0x1, 0x1, 0x1000}, {0x3, 0x100, 0x1800}, {0x4, 0x7ff, 0x800}], 0x8)
clock_gettime(0x5, &(0x7f0000000300))
semtimedop(r3, &(0x7f0000000040)=[{0x1, 0x3977, 0x800}, {0x3, 0x1, 0x800}], 0x2, &(0x7f0000000100)={r4, r5+10000000})

03:38:31 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f00000001c0)=[{0x2, 0x3ff, 0x1000}, {0x0, 0x1}], 0x2)
semtimedop(r0, &(0x7f0000000180)=[{0x2, 0x5, 0x800}, {0x0, 0x400, 0x800}, {0x2, 0x9, 0x1800}, {0x4, 0x40, 0x800}, {0x0, 0x3}], 0x5, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
clock_gettime(0x0, &(0x7f0000000100)={<r2=>0x0, <r3=>0x0})
semtimedop(r0, &(0x7f00000000c0)=[{0x4, 0x9}, {0x4, 0xf72, 0x800}, {0x3}, {0x3, 0x4, 0x1c00}, {0x0, 0x45, 0x800}, {0x2, 0x72c, 0x1800}, {0x0, 0x1800, 0x1800}], 0x7, &(0x7f0000000140)={r2, r3+10000000})
semop(r0, &(0x7f0000000040)=[{0x4, 0x7, 0x1800}, {0x1}, {0x2, 0x0, 0x1000}, {0x1, 0x80}, {0x0, 0x81}, {0x4, 0x20, 0x800}], 0x6)

03:38:31 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:31 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:31 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000080)=""/202)
semop(r0, &(0x7f0000000000)=[{0x1, 0xffff, 0x1000}, {0x2, 0x2, 0x1800}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:31 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
r1 = semget(0x3, 0x3, 0x459)
semctl$GETZCNT(r1, 0x7, 0xf, &(0x7f0000000080)=""/222)

03:38:31 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:31 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:31 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:31 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:31 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semtimedop(r0, &(0x7f0000000000)=[{0x2, 0x8, 0x800}, {0x0, 0xc5, 0x800}, {0x3, 0x0, 0x1000}, {0x3, 0x1, 0x1000}], 0x4, &(0x7f0000000080)={0x0, 0x989680})
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:32 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "00ff0000000000000000bc079de000008000", 0x0, 0x3})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:32 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
r1 = semget$private(0x0, 0x1, 0x80)
semop(r1, &(0x7f0000000000), 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:32 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000003500)={&(0x7f0000003440), 0xc, &(0x7f00000034c0)={&(0x7f0000003480)={0x18}, 0x18}, 0x7}, 0x0)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$IPC_RMID(r1, 0x0, 0x0)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r1, &(0x7f0000000040)=[{0x3, 0xb9}, {0x4, 0x3ff, 0x800}, {0x2, 0x1, 0x1000}], 0x3)
semtimedop(r1, &(0x7f00000000c0)=[{0x1, 0xfffe, 0x800}, {0x0, 0x1000, 0x1000}, {0x1, 0x7, 0x800}, {0x4, 0x3, 0x1800}, {0x0, 0xfb47, 0x1000}, {0x1, 0x9, 0x1400}, {0x0, 0x9, 0x1800}], 0x7, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)

03:38:32 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:32 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:32 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
r1 = semget$private(0x0, 0x8, 0x0)
semtimedop(r1, &(0x7f00000000c0), 0x0, &(0x7f0000000100))
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semctl$IPC_RMID(r1, 0x0, 0x0)
semtimedop(0x0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x10)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setuid(r3)
r4 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(0x0, r5, 0x0)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000140)={{0x1, 0xee01, 0x0, r3, r5, 0x80, 0xff}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6})
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f0000000000)=[{0x1, 0x7ff, 0x1800}, {0x1, 0x20, 0x1000}, {0x0, 0x81, 0x800}, {0x2, 0x1}], 0x4)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:32 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f00000000c0)={0x1f, 0x800000, 0xb9c2, 0x0, 0x7e, "935caaa10e770316b6e828a9777ebe640ecdd4", 0x83})
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f0000000040)="bf59fe2ce89d0d734cd29d", 0xb)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000000)=0x13)

03:38:32 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:32 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:32 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x27a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1579.793369][ T6969] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6969 comm=syz-executor.5
03:38:32 executing program 0:
r0 = semget$private(0x0, 0x3, 0x204)
semop(r0, &(0x7f0000000040)=[{}, {0x0, 0xf000}, {0x3, 0x0, 0x800}, {0x3, 0xff81, 0x1000}], 0x4)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:32 executing program 2:
lseek(0xffffffffffffffff, 0x7fff, 0x3)
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:32 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:32 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1579.870694][ T6969] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6969 comm=syz-executor.5
03:38:32 executing program 5:
r0 = semget$private(0x0, 0x0, 0x33e)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f00000000c0)=""/4096)
semop(r0, &(0x7f0000000040)=[{0x4, 0x0, 0x1000}, {0x2, 0x2, 0x800}], 0x2)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:32 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:32 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
semtimedop(r0, &(0x7f0000000000)=[{0x2, 0x40, 0x1000}], 0x1, &(0x7f0000000080)={0x77359400})

03:38:32 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:33 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x7}, {0x2, 0xc6, 0x1000}], 0x2, &(0x7f00000000c0)={r1, r2+10000000})
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:33 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x0])
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
r2 = semget$private(0x0, 0x8, 0x0)
semop(r2, &(0x7f0000000000)=[{0x2, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x10)
semtimedop(r2, &(0x7f0000000040), 0x26, &(0x7f00000000c0))
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
semctl$IPC_RMID(r0, 0x0, 0x0)
semget$private(0x0, 0x2, 0x120)

03:38:33 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x1, 0x0, 0x0, 0x1, "00000e001ddd53c820aeeeda45673eccddff00", 0x0, 0xfffffffe})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:33 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:33 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x3, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
r1 = semget(0x3, 0x4, 0x0)
semop(r1, &(0x7f00000000c0)=[{0x4, 0x527, 0x1000}, {0x0, 0x7fff, 0x1000}, {0x4, 0x7f}, {0x0, 0x100, 0x800}], 0x4)
r2 = semget$private(0x0, 0x2, 0xc4)
semop(r2, &(0x7f0000000040)=[{0x1, 0x3, 0x1000}, {0x1, 0x800, 0x1000}, {0x0, 0x5}, {0x3, 0xbf, 0x1800}, {0x3, 0x8, 0x1800}, {0x4, 0xb5}], 0x6)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:33 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, 0x0, 0x0, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:33 executing program 2:
r0 = semget$private(0x0, 0x2, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:33 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, 0x0, 0x0, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:33 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:33 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
r1 = semget$private(0x0, 0x2, 0x90)
semop(r1, &(0x7f0000000000)=[{0x2, 0x774, 0xb10f53786ccff912}, {0x3, 0x3800, 0x1800}], 0x2)
semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000080)=""/236)

03:38:33 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, 0x0, 0x0, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:33 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:33 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:34 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000000)={{0x48}, [@NFT_MSG_DELSET={0x11, 0xb, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_TABLE={0x4, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x0)
semop(r0, &(0x7f0000000000)=[{0x0, 0x80}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:34 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
r1 = semget$private(0x0, 0x1, 0x458)
semop(r1, &(0x7f0000000000)=[{0x2, 0x3, 0x800}, {0x1, 0x2}, {0x3, 0x7fff, 0x800}, {0x4, 0x80}, {0x3, 0x8, 0x1000}, {0x3, 0x3, 0x800}, {0x1, 0xff}, {0x3, 0xcca, 0x1800}, {0x0, 0x0, 0x1800}], 0x9)

03:38:34 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:34 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x13)

03:38:34 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:34 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semop(r0, &(0x7f0000000040)=[{0x3, 0x400, 0x1000}], 0x1)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:34 executing program 2:
r0 = semget$private(0x0, 0x0, 0x0)
semop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x2, 0x5, 0x800}], 0x2c)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:34 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:34 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 1581.626775][ T7119] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
03:38:34 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
r1 = semget(0x1, 0x1, 0xd1)
semop(r1, &(0x7f0000000000)=[{0x0, 0x6}, {0x2, 0x101, 0x1000}, {0x4, 0x8, 0x800}, {0x1, 0xc0, 0x1000}], 0x4)

03:38:34 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:34 executing program 3:
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r0, &(0x7f0000000b40)=ANY=[], 0xa)
close(r1)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r0, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x80000001, 0x0)

03:38:35 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:35 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT(0xffffffffffffffff, 0x2, 0x12, &(0x7f0000000080)=""/168)
semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f0000000140)=""/118)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x2, 0x2d8}, {0x2, 0x2, 0x1000}, {0x3, 0x7, 0x1000}], 0x3)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:35 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:35 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000100)={0x7, 0x10, [0x5, 0x7ff, 0x0, 0x10000], &(0x7f0000000040)=[0x0, 0x0]})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:35 executing program 3:
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r0, &(0x7f0000000b40)=ANY=[], 0xa)
close(r1)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r0, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x80000001, 0x0)

03:38:35 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semop(r0, &(0x7f0000000040)=[{0x0, 0x6, 0x800}, {0x1}, {0x1, 0x1, 0x1000}, {0x2, 0xb9, 0x1800}], 0x4)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
semtimedop(r0, &(0x7f00000000c0)=[{0x0, 0x400, 0x800}, {0x2, 0x1000}, {0x2, 0x0, 0x1800}, {0x3, 0x401}], 0x4, &(0x7f0000000140)={r1, r2+10000000})
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:35 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:35 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000000)=[{0x3, 0x2, 0x1000}, {0x3, 0x37f2, 0x1000}, {0x4, 0x3}, {0x3, 0x61, 0x1800}, {0x4, 0xff, 0x800}, {0x1, 0x2}, {0x4, 0x0, 0x1800}, {0x2, 0x81, 0x3000}], 0x8)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x8, 0x1, 0x3f, 0x200, 0x5, 0x1, 0x800, 0xda, 0x3f, 0xfff9])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semtimedop(r1, &(0x7f0000000080)=[{0x4, 0x101, 0x1000}, {0x1, 0x3b, 0x1800}, {0x0, 0x9}, {0x1, 0x6}, {0x1, 0x7f, 0x800}, {0x0, 0x5, 0x800}, {0x4, 0x1, 0x1000}, {0x4, 0x58ad, 0x2000}], 0x8, &(0x7f00000000c0)={0x77359400})

03:38:35 executing program 3:
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r0, &(0x7f0000000b40)=ANY=[], 0xa)
close(r1)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r0, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x80000001, 0x0)

03:38:35 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0)

03:38:35 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:35 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0)

03:38:36 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040)=[{0x4}, {0x0, 0xf000}, {0x1, 0x2, 0x800}, {0x4, 0xffff, 0x800}], 0x4)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
semget$private(0x0, 0x4, 0x484)

03:38:36 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:36 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0)

03:38:36 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x70440, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000180))
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "00666a7d53e65dbc9100000300000010ddff00"})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc)
ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x4, 0x300000, 0x200, 0x0, 0x91, "e6505e7b165e1a75c58095bc15f2b1c74f75d0", 0x8, 0x20})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f0000000000)=0x13)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc)
ioctl$SNAPSHOT_S2RAM(r4, 0x330b)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000001c0)={0x3, 0xfc21, 0xff, 0x6, 0x17, "fab13ef187d1e98b"})

03:38:36 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)

03:38:36 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r0, &(0x7f0000000040)=[{0x4, 0x2, 0x1800}], 0x1)
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$GETVAL(r0, 0x3, 0xc, &(0x7f00000000c0)=""/135)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:36 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:36 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)

03:38:36 executing program 2:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x100, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4010100)
r2 = semget$private(0x0, 0x1, 0x0)
semop(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080))

03:38:36 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:36 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)

03:38:36 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:36 executing program 0:
removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'os2.', '^+*/\x00'})
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000, 0x1000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f0000000100), 0x0)

03:38:36 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040))
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = syz_open_dev$rtc(&(0x7f0000000180), 0xf5, 0x200440)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f00000001c0)={{r3}, "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"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000011c0), 0x200002, 0x0)
ioctl$FIONREAD(r4, 0x541b, &(0x7f0000001200))

03:38:36 executing program 3:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000003500)={&(0x7f0000003440), 0xc, &(0x7f00000034c0)={&(0x7f0000003480)={0x18}, 0x18}, 0x7}, 0x0)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$IPC_RMID(r1, 0x0, 0x0)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r1, &(0x7f0000000040)=[{0x3, 0xb9}, {0x4, 0x3ff, 0x800}, {0x2, 0x1, 0x1000}], 0x3)
semtimedop(r1, &(0x7f00000000c0)=[{0x1, 0xfffe, 0x800}, {0x0, 0x1000, 0x1000}, {0x1, 0x7, 0x800}, {0x4, 0x3, 0x1800}, {0x0, 0xfb47, 0x1000}, {0x1, 0x9, 0x1400}, {0x0, 0x9, 0x1800}], 0x7, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)

03:38:36 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:36 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1584.235259][ T7295] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7295 comm=syz-executor.3
03:38:37 executing program 2:
r0 = semget$private(0x0, 0x1, 0x400)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:37 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:37 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:37 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semctl$IPC_RMID(r1, 0x0, 0x0)

03:38:37 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:37 executing program 2:
r0 = semget$private(0x0, 0x3, 0x42f)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
semop(r0, &(0x7f0000000000)=[{0x3, 0xe0eb, 0x2000}, {0x1, 0x1e, 0x800}, {0x0, 0x100, 0x1800}], 0x3)

03:38:37 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:37 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:37 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRES16], 0xfffffecc)
write(0xffffffffffffffff, &(0x7f0000000180)="a8ad3712a526c583fc4c1c6f4e0fa9dd790e0b7873ea4e9a4c8d2f309f0539739fd006159d1432ce13a47e5de6e2c327103a448529fdf0cc636a71d743a89e78bfa6087399163ab282428cf64f7dc9f0540eed7abe0e89683ddb89890597be5e4611d17ef32121ac0747d9504989c92d8a2654c3ee43c2929e11d9975832b21f67e262750d6cc6d7dcbf", 0x8a)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000080)={0x3, 0x0, 0xd78, 0xffffffff, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f0000000240)="af6f6660d4f5f88a78ecebb852d5887f04d5bd66bf6bf5efa83bea0172fa41eb6727be07740d78dd45fd7c537f2b124f51766db595e0a7fa43af8cae913c983292f29f886756f622cbdb45c70c0a179055a62e6a5ae7f9c19ba7f5a2b0f241f4caf29de279de1159e1252f000f1bc29c8b6d97610ff971abb4615fb59f288ed8885e36", 0x83)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:37 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:37 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000000c0))
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r0, &(0x7f0000000080)=[{0x1, 0x2, 0x1800}, {0x2, 0x4, 0x1000}, {0x1, 0x4, 0x1800}], 0x3)
semop(r1, &(0x7f0000000000)=[{0x3, 0x6d3a, 0x1800}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:37 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
r1 = semget$private(0x0, 0x8, 0x0)
r2 = semget$private(0x0, 0x8, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x10)
clock_gettime(0x0, &(0x7f0000000100)={<r3=>0x0, <r4=>0x0})
r5 = semget$private(0x0, 0x8, 0x0)
semop(r5, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semtimedop(r5, &(0x7f00000000c0)=[{0x2, 0x8d, 0x1000}, {0x4, 0x7, 0x1000}, {0x4, 0xfffc, 0x1800}, {0x0, 0xffff, 0x3000}, {0x2, 0x4, 0x1000}, {0x1, 0x7, 0x1000}], 0x6, &(0x7f0000000140)={r3, r4+10000000})
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f0000000040)=[{0x3, 0x2, 0x1000}, {0x0, 0xffff, 0x800}, {0x1, 0x6, 0x1800}, {0x2, 0xe0e2, 0x1800}, {0x2}, {0x2, 0x40, 0x1000}], 0x6)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:37 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:37 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:37 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:37 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semctl$GETVAL(0x0, 0x3, 0xc, &(0x7f0000000040)=""/27)
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:37 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:37 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:37 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:37 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7a02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:38 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
preadv(r1, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/119, 0x77}, {&(0x7f0000000040)=""/47, 0x2f}, {&(0x7f0000000200)=""/150, 0x96}, {&(0x7f00000002c0)=""/223, 0xdf}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f00000003c0)=""/153, 0x99}, {&(0x7f0000000480)=""/181, 0xb5}, {&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000580)=""/161, 0xa1}, {&(0x7f0000000640)=""/97, 0x61}], 0xa, 0x8, 0x98a)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000000)=0x13)

03:38:38 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xefff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:38 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:38 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
r1 = semget(0x2, 0x2, 0xc2)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/slabinfo\x00', 0x0, 0x0)
r3 = msgget$private(0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000001c0)={0x0, <r4=>0x0})
sched_setattr(r4, &(0x7f0000000240)={0x38, 0x2, 0xb, 0x2, 0x6faa, 0x5d, 0xffff, 0x100, 0x2, 0x1b}, 0x0)
msgsnd(r3, &(0x7f0000000140)=ANY=[], 0x64, 0x0)
msgsnd(r3, &(0x7f0000000840)={0x3, "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"}, 0x39d, 0x0)
msgrcv(r3, &(0x7f00000002c0)={0x0, ""/249}, 0x101, 0x0, 0x0)
semop(r1, &(0x7f0000000040)=[{0x0, 0x1000, 0x3000}, {0x2, 0x20, 0x3000}, {0x2, 0x3, 0x800}], 0x3)
semctl$SEM_INFO(r0, 0x4, 0x13, &(0x7f00000000c0)=""/209)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:38 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
r1 = semget(0x0, 0x1, 0x110)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x15d7, 0x1f])

03:38:38 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf603, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:38 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:38 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:38 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x820])

03:38:38 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfc01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:38 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = fsmount(0xffffffffffffffff, 0x1, 0x10)
write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="73797a310a8502bc0b5d4fc274b8b82cad66069b4a17ba771949910a18699fd0b7f1ae432c7c3a09be16ddacc92d8bba57dfba454e297cfcf3c13dd50c2ddf53d0ae5aab1d7fc3495a69e8c722607073079a4711668671ad72097df8447debb8a6a9bd598725389c74ab47d66ddfdcd3bf93995d3d9c0d49f10e96fce7c9c3652f7e7ba64383beaa3f543c48c1e10300d463a3dfeee0eb7432125f240aba91311db15967df270b58687d07dd32dcad03218a57fecb356a3667fa7ddd51727ae015e776d3b4000000000000000000"], 0xce)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x3, 0x8, 0x8, 0x1, 0x1, "1b67b2004d234109be8b222cfdc70913389101", 0x4, 0x8004})

03:38:38 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f0000000000)=[{0x3, 0x3}, {0x0, 0xf000, 0x800}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:38 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:38 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:38 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000000)=[{0x4, 0x3352, 0x1000}, {0x4, 0x9, 0x1000}, {0x4, 0x100}], 0x3)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:39 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:39 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:39 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040))
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:39 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x8, 0x1800}, {0x0, 0x1, 0x3000}, {0x2, 0x6, 0x1000}], 0x3, &(0x7f0000000080))
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
r1 = semget(0x3, 0x0, 0x0)
semop(r1, &(0x7f00000000c0)=[{0x0, 0xa87, 0x1800}, {0x0, 0x4, 0x1800}, {0x3, 0x2, 0x800}, {0x1, 0x6, 0x800}, {0x0, 0x7, 0x1800}], 0x5)
semop(0xffffffffffffffff, &(0x7f0000000200)=[{0x1, 0x8}, {0x0, 0x9, 0x1800}, {0x1, 0x6, 0x1800}, {0x0, 0x7fff, 0x1800}, {0x1, 0x3f, 0x1800}, {0x0, 0xbd65}], 0x6)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
r2 = semget$private(0x0, 0x8, 0x0)
semop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(0x0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x10)
semctl$IPC_RMID(0x0, 0x0, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x10)
semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000000100)=""/196)
r3 = semget(0x0, 0x0, 0x35)
semop(r3, &(0x7f0000000240)=[{0x3, 0x200, 0x800}, {0x0, 0x6, 0x800}], 0x2)

03:38:39 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:39 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:39 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semget$private(0x0, 0x1, 0x0)
semget$private(0x0, 0x1, 0x82)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x203, 0x3])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:39 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:39 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0xffffffff, 0x0, 0x0, 0xfd, "000000ff00", 0x0, 0x1})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)
write(r0, &(0x7f0000000180)="0434c190a6ce976de9504c98c364e5b284fcc37febaeda5e93b2e95849081961d1ce079de65ed535d2f68a6ede254aa724da46b5c46641b1bd27cb257149f475009f0a47d92b3bbf6dd9b588d2e0fdfbae10bd7ff68519b302dcd112b91d7f4f9a31f0db3ddb8d8d35240cdea671c8994a9cc4dc0d2e18d1f1", 0x79)

03:38:39 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f00000000c0)=[{0x3}, {0x0, 0xf000}, {0x2, 0x3818, 0x1000}], 0x3)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x200, 0xff7, 0x52, 0x7, 0x8, 0xfff9, 0x20])
semctl$IPC_RMID(r1, 0x0, 0x10)
semget$private(0x0, 0x2, 0x0)
semtimedop(r1, &(0x7f0000000000)=[{0x0, 0xf22f}], 0x1, &(0x7f0000000100)={0x0, 0x989680})
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x800}, {0x3, 0x4}], 0x2)
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:39 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:39 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:39 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:39 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:40 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:40 executing program 2:
r0 = semget$private(0x0, 0x4, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
semctl$IPC_RMID(r0, 0x0, 0x0)

03:38:40 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:40 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:40 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x9, 0x1000}, {}, {0x1, 0x40, 0x1000}, {0x0, 0x9, 0x1800}, {0x4, 0x2, 0x1800}, {0x3, 0x0, 0x800}, {0x5, 0x7}, {0x3, 0x4, 0x1000}], 0x8, &(0x7f00000000c0))
semctl$IPC_RMID(r0, 0x0, 0x10)
semop(0xffffffffffffffff, &(0x7f0000000100)=[{0x1, 0x8, 0x1000}, {0x1, 0x3, 0x1800}, {0x1, 0x5, 0x800}, {0x1, 0xecb4, 0x1000}, {0x1, 0xd18d}], 0x5)

03:38:40 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)
syz_open_dev$tty20(0xc, 0x4, 0x1)
syz_open_pts(r0, 0x18000)

03:38:40 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:40 executing program 5:
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x15, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c)
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:40 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:40 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040), 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000))
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000, 0x1000}, {0x1, 0x0, 0x1800}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f0000000000)=[{0x7, 0x0, 0x1000}, {0x0, 0x1}, {0x4, 0x3}, {0x0, 0x60a, 0x800}, {0x2, 0x3, 0x1000}, {0x0, 0x40}, {0x2, 0x4, 0x800}, {0x2, 0x7, 0x1000}, {0x7, 0x5, 0x1800}], 0x9)
semop(r1, &(0x7f0000000040)=[{0x1, 0x1ff, 0x800}], 0x1)

03:38:40 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:40 executing program 4:
socket(0x10, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/timer_list\x00', 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, <r0=>0x0}, &(0x7f0000000280)=0xffffffffffffff19)
setresgid(0x0, r0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2000)
setregid(r0, r1)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r2, &(0x7f00000000c0)="b4", 0xfdef)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f0000000000)=0x13)

03:38:40 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:40 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:40 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:40 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:41 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
r1 = semget$private(0x0, 0x3, 0x486)
r2 = semget(0x1, 0x2, 0x8)
semctl$IPC_RMID(r2, 0x0, 0x0)
semop(r1, &(0x7f0000000040)=[{0x4, 0x0, 0x1000}, {0x3, 0x0, 0x800}, {0x1, 0x7fff}, {0x1, 0x1, 0x800}, {0x2, 0x37, 0x1000}], 0x5)
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semtimedop(r0, &(0x7f00000000c0)=[{0x4, 0x51e, 0x1800}, {0x3, 0x6, 0x800}, {0x0, 0x2, 0x1800}, {0x6, 0x2, 0x1800}, {0x2, 0xe1d, 0x1800}, {0x3, 0x2a6, 0x1000}], 0x6, &(0x7f0000000100)={0x0, 0x989680})
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:41 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:41 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:41 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semctl$GETNCNT(r0, 0x4, 0xe, &(0x7f0000000040)=""/30)
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f0000000100)=[{0x2, 0x1, 0x1800}, {0x2}, {0x3, 0x5, 0x800}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000000c0)=[0x6, 0x6])
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x2, 0x400, 0x2, 0x401, 0x9, 0x6, 0x0, 0x6])
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:41 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
ioctl$VT_WAITACTIVE(r0, 0x5607)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:41 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
r1 = semget$private(0x0, 0x1, 0x486)
semtimedop(r1, &(0x7f0000000080)=[{0x5, 0x7f, 0x1800}, {0x0, 0x400}, {0x4, 0x6, 0x800}, {0x0, 0x0, 0x800}], 0x4, &(0x7f00000000c0)={0x0, 0x989680})
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
semop(r0, &(0x7f0000000000)=[{0x1, 0x0, 0x1000}, {0x2, 0x81}], 0x2)

03:38:41 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:41 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:41 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:41 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000000)=[{0x3, 0xfffb, 0x800}, {0x3, 0x1ff, 0x313f64e162afebac}], 0x2)
semctl$IPC_RMID(r0, 0x0, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:41 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:41 executing program 2:
r0 = semget$private(0x0, 0x1, 0x4)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x3}, {0x1, 0x4, 0x1000}], 0x2, &(0x7f00000000c0)={r1, r2+60000000})
semop(r0, &(0x7f0000000040)=[{0x2, 0x20, 0x1000}], 0x1)
semget$private(0x0, 0x3, 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:42 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:42 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:42 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f0000000000)=[{0x3, 0x4, 0x800}], 0x1)

03:38:42 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semget$private(0x0, 0x1, 0x40)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
io_cancel(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="ccb9959e1ba969ad3b47a1deeb5ff198fe2aea0bfb5f1954233d1187c342ab4e1f876af811c58a1b4efe469416f8e0a499ff33a45c17d792ed0fb8899387020643c558fec775fe8a6ee4f9a432430fb14054c5a0d9a14a7da54a5c120d4e689e51e23100ca1d4087cc0e5a6da8247d8b0237120dafe153e31ba24c112e51975e1ba4377bc4ba2c6178a1ea17849488814bda315d9d854285e5c8fad5", 0x9c, 0x3ff, 0x0, 0x4, r1}, &(0x7f0000000180))
ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f00000001c0)={0xb52, 0x1, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})

03:38:42 executing program 0:
r0 = semget$private(0x0, 0x8, 0x201)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:42 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:42 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x10000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
r4 = getpgid(0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$unix(r3, &(0x7f00000074c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x38}], 0x1, 0x0)
fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r4})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:42 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:42 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:42 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:42 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:42 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:42 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:42 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xb000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:43 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semop(0x0, &(0x7f0000000000)=[{0x2, 0x1ff, 0x1800}, {0x3, 0x3ff, 0x1c00}, {0x4, 0x2, 0x1000}], 0x3)
r1 = semget(0x3, 0x0, 0x493)
semop(r1, &(0x7f0000000080)=[{0x1, 0x101, 0x800}, {0x0, 0xfffd, 0x1000}, {0x3, 0xa15, 0x1000}, {0x2, 0x3, 0x800}], 0x4)
r2 = semget$private(0x0, 0x3, 0xa0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080))

03:38:43 executing program 5:
open(&(0x7f00000000c0)='./file0\x00', 0x529400, 0x20)
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
r1 = semget(0x0, 0x4, 0x58c)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)=[0x5b51, 0x0, 0x7fff, 0x0, 0xfff7, 0x9, 0x9])
semctl$IPC_RMID(r1, 0x0, 0x0)
semtimedop(r1, &(0x7f0000000040)=[{0x1, 0x18, 0x1800}, {0x3, 0x5, 0x1000}], 0x2, &(0x7f0000000140)={0x0, 0x3938700})

03:38:43 executing program 0:
msgget(0x3, 0x421)
r0 = semget$private(0x0, 0x8, 0x41c)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semop(r0, &(0x7f0000000100)=[{0x0, 0x101}], 0x1)
semctl$IPC_RMID(r0, 0x0, 0x10)
r1 = semget$private(0x0, 0x3, 0x11c)
semctl$IPC_RMID(r1, 0x0, 0x0)
r2 = semget(0x0, 0x2, 0x80)
semctl$IPC_RMID(r2, 0x0, 0x0)
semtimedop(r0, &(0x7f0000000040)=[{0x2, 0x3, 0x800}, {0x0, 0x5, 0x1000}], 0x2, &(0x7f00000000c0)={0x77359400})

03:38:43 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:43 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:43 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
r1 = semget$private(0x0, 0x0, 0x18)
semop(r1, &(0x7f0000000000)=[{0x4, 0x4, 0x800}, {0x2, 0x2}, {0x2, 0x20, 0x1800}, {0x1, 0xff01, 0x800}, {0x0, 0xfff7, 0x800}, {0x2, 0x7fff, 0x1000}], 0x6)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:43 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:43 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x3, 0xc50, 0x400}, {0x7, 0x7, 0x1000}, {0x4, 0x7, 0x1800}, {0x3, 0xffe1}, {0x6, 0xff00, 0x800}, {0xf, 0x0, 0x1000}], 0x6, &(0x7f0000000080)={0x77359400})
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:43 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xd000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:43 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:43 executing program 2:
r0 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000001200)=[{&(0x7f00000000c0)="d75a6a6ee2fbfbb1120f44150acce0f8fd215c248b143c382e3adf0f3bba4cdafa8e1b37d59e8a48c8a89a6daece67f361d0e1d70178c94e531d8957105f2fade5a294ff25c4a5284ffc3b97806e369d2302db03a92b777befa1fc8230f5a2c3f31a7a0fc4ec25066a55caa8d7c6bff889a9817ac94a55e42bc29a96d52970dc23cb962ad72d76c0bf7748234391c4bc444a3f4395d5aa8212e039d2f2f5a53340c68b4108d2de813f82ab33bfebb872c1257eb7b299bdff574245604bf4b2d81b0ceeddfc40a73ab6549ea0565f0462209802b174e21fab06e657cce322626b529457b0f528c5ddb37049ed11fc24c070c9d13eb4719dc286015c46d2b07c5294549a74c031e75cc5f696f7d3a9eb24185042f25e5ede91493d683be280539a3c2d00c03e531ba676f823feba5460bc8feff099e5f1c03498a4af10394563a1bc914eceb3670bf88a7eec23d5925b70ec371a6886fca4a42d5d04b05894b5ea931a6fb414c90b9817aa6935f6af57e951e86881175d4fa88122436f661d035901d1481a5080770c4296602a28fcddebd01ea8b89fe067c61d06e5bfad74864a3eef258fd1cc0c9bc37b7c51eacc44a34e647b99847464722ebda805b7005fef8e9f9e2593d47711c8718c51d9eb7686dbb29c7011439415afb648412ca8a61a9e5ec473899e9c977f30162455313184ab2b024a01edbe7ccd2d299a9e6bea5eb168d2625a122a1aff2ec1a0f6a9e0e1a008bbc0fb9d62c4f3f56a84f814e7c7ca9ae8077ad2530a84b1ab4ab907d39a0e854ff463c5ba5b3f29acac5d3388133b08e5469d747bdbedb73bc09aad357b0fb5ac6d75721ea7485d0f02a5fad033ca57a6fd6481aeb6b371720f7d388db30cef3efac9510239d3f6baa4ef438a51786d203e1fa2a617511b90f13ece10652ae2a9499219cfca2acbee718a58aac38d651ecd7d4508b6c2599d652de311aa4d19f2cfba4848fc3dbffead468d8f37bec9744086aa7bcec7f86580cc77f9e998101a676fe8b9a2d36207617b49c8995172dd749e8804538cf7da8cd2f064eb64dea25a483321ae78b903091afa64714b366c0b1de06ffdff7860e98557deab842f2085fb1711815c458f0d95a982fced8fe6b701a3d719189296c1e3fd770860cc4b5de9997d5af0dc7d8e6d1b73252e6536441c28a26dcc8817bda981f3f9dd0c4799b73b3702dd49fe0e7117ffc9d0a9296d9f5dcee39ede54e2ab901ee9830c4a045c4213f7f31cac5590d0d3cae10cb07d4de4f87832f6f574f94fff19416807062fe0d63ebc002cc937a270cdf778b15cb09e12594816efc303e5c897faa8cda4ca21e93614c70af5fae3cea5c4bcce0798c5e15fa6a6f4f55c9d76e120264a8c9dd553fcf10b68cc9dd0d1fabbe02b6ae8e6f5fb39348d305e593598b8f92b7c54064e225972b68701593ba2da8a6d732655cfe52af40aeed55e9eb3d6c7d0f17f81529dbaa77e18eae5466c4b2355b35a7328d9f3e99768f90b2f5eae8a00f8fa95b886d061d3c2698a171567253fd5fc8631fc8b0701d2bf9e9f1e5131b03732daa5709bf622b52993e0a561af6fa1abe25537309fe9f5b851f8a0d28b6a240a0222c2d908624cf79258e9846c14c4d7af4c97a99f66655c646ae15031001342074037a2dea252a881633b2227aea47babbbc3f6f8c1c7766c1d8083a4e626cece455ab6581894bed41893eea0a6322678d89ca787d7872e8797da9503b698589bffb456614be438e6efef4e41656a2e44eda41781fda69bae36fbdc642abe84b7b11fc727a61788081cc3fed6c6a8c15dbd107bf7d7e46b120488bccd5927bc6f510da429a1507b65965c7c4b07579cfa501a9520274b90e3cfdf7d658ac59c1316fc3bfa4a12b2c1a481d08cfe9e80fee9457eaaeea5b3ce757cf4097f88091d35a9b68e101bcd2410eb55be3cce18a1d7a4e9fcdfa80c073f65d582356bb8bd64b27cbfac7e9f3a4de530b9426cc7e21b3a5470c946496e9ab8b6d0cafd5d540a3d74272dd481cf89994786761d3ce5750cbfb99c4cd49c7b40476ac066dfb2ad990df50632de7636ee2aac1186849db2e4390b3bc324dcbd9ca038a502743970cbb954dc6757025178e74580047d501431aa4bd64434380031575548944a0483a9a4444a34490c7b2d748dc1da5c9611f936b6eba9fd519f176ccc7b91caab93d1d886edd1c73ab7c8448bd4f2ed9dcef8b3991efeeef246b683c7d7a52ceff64126feedc41b61dd8bc0a8d072ac910e4f31c82ba86be75a5d7bfb0952a5cf2042b73431efffee715006617da6ded8025f9dc07de67a6bd7e7b226b0bc4f6b3e924c6814c98e53748a882a368fdfe197579b1328a58ace98fc6f30b13d018068ec9c273333d0618402ddf5a5c6848e51954476f9ed7321eedbcbf8bea8f7e1551002e26fc5dfb541ddf0b70b6c4835e9de38f6eabe83d617087a94d11b89a65f8cec9c5732567cc54109b4fd7cb2c1d11a6a20ba38cbc2e3a1a9e858c30bbd88b6104d9d7ec69773235806fac34006c879a1650bc1a0668cfed15bb490a8a2f1c7514f4aa97d15e48eb812fea109a2483b58af0d1c595e154dccfb232d8dec51245aff7e56e4dee195f8e83106e919930ec223a58873515db9efea66542a5db0d577d7e0b3b188aa583342a3cab062df9c3a8e189d0203772e1d60893a1530e6a7883f11f84b10c85332b97d4cb6a085d4b373b3a4ac5e32f1f013f0d2a3f5ded252e526da662e5069896dcf313ceac5e6968acce60145dd780c5c7eaee4b93707245592c711830c439907c6d649cf863f0ce28b7bcc1e1a175f2523c429ade7669ee47589f9d1bc47c1bd0099fda5e1b3fcb5e2a1a0f1357b11d4b25ad1bdfe464198f43b08555b2b271f0695a881ca4770ac99711a42d8bb8d186dda76ed9fd56ea898e938d655b6abe3e1382d5b862ad38c136f853bb285c65d1573db7a6e018f3416651eaad7fc924dffa07ea11efc703044b38ee50f39eb407d7c0b6cc338520d57ee95ee7fd247b1c4c3ea3b57e78c6280dd04509f1624aed36e764333b8222760e0d7baccbcb9f25276d7e4289a41a63d00eb92c74b1a0a5faa3bade1acd3a038ce068ae9f39ac0869c63b1450f9b7d8e91c2c08ccb6492c074005c2d7c1bc87accd57395e4d989035c87e718d5c8a13b0c33e86bbf6a49c416418861d2a721ab19cf41a8a34295b502a5c004827ac689ff5892ce2c7873fa021966917dda2fe8b20325f31271b79b36e9235242bc3b86675df7302624e6c8fd76fe92cd29df7279265c1fc8729885b60f60cbd7cc59661cc04fdfcf4b7cff6adf8ce772c72abf69ec4b7dbc39c4dac834ad94d9214a6de127024c81e5eb100b5e06572f4a0dae0b4a01086740e604bd82d4e5659e5dcef85521ed512dfb426d66dc02a836d70cfef3e9df57292250dd11be7e8b673043b93eec0798b7dd20e06329098399c0fd22decc28bf344c1048c4cfbca4cf7829ab206344d9dd0114b0fa1487bde67c3040196d18bf0e085c71d6e0f9670b34657ccf4ca1b34563c4188c6d8fa114d999871dfb3c9d79e7967ab6c75d15455bc65877023298b7326858f883935668a0a1f02ea9fb579a47a436edde4d2708a716eaf8e19dff6ff0657fef212a77984e0297eb693bca2eebbc12cdfd3e9fb0b45b3f9741737eee955cae63f6c669bc42e360ee7d96a08d4c16fd0fc040e328a9cc605a21c78f90ec1eac8532f4d57216867636832d74a0eb80b98c294dc8dce47ec94d23bc957faec07aaa22aa540d364707ceaad899340e346fc9ec06d5354946923aa66fa6b53e952b577fbf0ebf7d96616416e999e5b67d9f81822679b3dd738c07ed061300b1c81cb487070fb12667be9a9f358b8aa2c4ffeb51fb142067593591b9843d6de176d2b40a981c8f6b143c369b085ba697da9bfcb507d14852d98419e54757a7d891d128987330b57e2acde260f5cd593dcfcc0a3e932fd4f73263b1ba7560e95bbca5931a5a68ef8273eb5d8ec57789724cec6708f6f318d35b36805629a514f201fe9b2fd0e6c05bce2a8040e4b614a498026f6879403046423bf2bca90f13884f2f63a13e1a12105cd0854e3438462b2308cfd875b010f87de36d67aa525a69e9f7b81ef677a74e5da5266cec2f2e0564cfda76f976ae74520856ae7a2316337914fcb05fce00f4b333deb762a96a9006c9d9ec59e1582d5fbe63b197cf84f6c2dba5d9b1708662e9be8d105446f9046f4af09aeca56d801fbcdf87f06387cd102bdbeefa32eb2c664c1f7011ad5fbdbf88913395004cd22553293d34c038c7783dc50638a0914574b75141a47ca3b82055a0e43c42a9de294a302639d3ce6eedc9e192fb79ab05374bd0ca7a836846cc92868d82669c55fe4338fe420ada4d8bd95af7aa0accb25a7932bdf3a28caa6db8c5f844164187b4462cb3d99be87cfc908603bee1e1d13671e5ee144356b8bf3c0eb0c847c228fb54b1224da429acab1229fa4f0dff138f684ca831d83d177bb7f4f6bea62c028ef5e69aebdbc58ab3c8c6a1e0b6b991d44085ed4f08702c3089d53d948777cd550e54a546f395883c8cfbcdc2cbf7dea39641912538ba05b04f05f3a18d55052c36e14aa5d4f4ba7e196c9aeffadbb487ee67b7212472bc3dd917e2c4307b32bfa0f28e16c6ebf5e916085042557ee234896913d61a77b566fabfeb7fec7e04d17ca55855a42d6bd4d5dda8f3ee69119dc3e966b2c475936dd91bdda61be1053bc8045507e765df19819d1fa911d2b19235df4159e8a2b4e9888f61c8f25da637745e7a149b7b1e7c95513929fa946b5497a6228032d9b84806ce193393d91335e82c5a4efe9f125e53576919b8ca351458e27799d7167699121b1fed67e15b4910bf764e46cb3e1516e6c4dd7e02fb2c0e36ca50ff7f5e8d233040e210fcfccdc7fd2efc6390bf5c942a1457a798d49eda5c89de8d1eb8900b64717ed3c374c210feebe380a1a4fc686efb6b49dcb3aa52a2cd7ad4d9598a599066119d6e2ebcde9ce2db3758ebd0398977b0c5252e659d5755378057f2bec20361319b82dea0983b00e25b1139910bd3715c064e67c25f8cfa9f4ea99db6c470c94d616e89cd7d4bd9ca399186be49c7160f924847515a39150267a52467aab5321ff5e4f704bc72130291b01bf2ae8ec8025a38d15d89b502f6b7539c741d7a8d7cd2d8bdb685bee0f54fa0c6812999ca93df98105f06b2a6ddb6446ba5e4e0d9cfb60ec9794d5724827324a24ff30ac52ab91a3cd47ccdb319dbf038f7da0f2bda1e06b74159c21066397c7bee1327ef21c3e1336db2b51272531b4ffb6a45f35b19d093284ffcaa2d0739cacbb906b37e7de653dd0eb930c420971d5bf15e2ca2974b6aa990ed8da83f5e8d2150fa701dca2e436f42cbebeb4b648975a6761dfe28937a3dba429e48cd09937eba90c52d287a2674e22960389d60c18896ff75feb10b7a9ea4aa32ce940928b7235e5fc42915f67735346cfe3cf6ce5fd62c8c468bc407e744e94fdcee5c8e3b6ffbf7889ed818816ecf482e79471615b19a0db4815e0a4e03e10ba72423287251c56e7ce5e476819fec70a56be20e9f9d073fe674e4d3d9645bb98d43955eed420489eba167a0fe588eb00d25280e2adf55d2b8875f51b032f6e14e94f96dce481438256f8a5a4ee87c434340f1c582bd2c5a82fbd6161b990c031012667aa252d35eac254fe4ec0bc79681447dd2dce7d9f31b5fd830649c850776905fac3342b53baaa5927879df5b3d8d27", 0x1000}, {&(0x7f00000010c0)="1ac7fc0a6c71c84e7b0ac01da0bacec497fc31549943212b6686999fe32c0e98f19d3c3773ce0de0da425c29f6926abedb64b5cc41722406a8ed9381478a6ffc3257d2d4131810a45727c708e84ddd516cba29a43e9921cf34e01b513ed12c930b7c79b0bc6eb2a43fb3d822e923f61302e8216adbfd805a51c1d9ece21b13cf", 0x80, 0x1}, {&(0x7f0000001140)="aa37f1a15867b316d12ebb352e12795d213267fd09a275237ecf996c5c706c9042bd401abdb8a7582cf159bdda6635ec99a2316d8a49d6900bfe2d40df0cc87192e30673ef1c88bf391a0c351ccd40eaba557e0b5f832ca315bbefc832432f490aa6e6cdc6e7ad03ad369bacac314f9ee267c85787436d905ab15dd3d23befc27609a38cffd840b2a0624d34aebf7ee41b6acb062b629415e8942b25815144712864305153a596aa8c7e447b4bf0a3922e78f79d4d88", 0xb6, 0xfe}], 0x1004050, &(0x7f0000001280)={[{@nodots}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@uid_eq}, {@appraise_type}, {@audit}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@smackfsfloor}]})
ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000001300)={0x1, 0x9, @status={[0x3, 0x68, 0x4, 0x2, 0x4, 0x4]}, [0x24000000000000, 0x40, 0x600000000000000, 0xb3fc, 0x0, 0x8de, 0x6, 0x9, 0x1, 0x1ff, 0x9, 0x8, 0x7, 0x9, 0x94b, 0x1000, 0xffffffffffffffff, 0x80000000, 0x64c0, 0xcaf, 0x1a, 0x21bf, 0x0, 0x4, 0x81, 0x5, 0x200, 0x5, 0x444, 0x9, 0x100, 0x1ff, 0x5, 0x7, 0x7, 0x3, 0x2, 0xfffffffffffffffa, 0x82, 0x5, 0x3f, 0xfff, 0x1, 0xaf, 0x800, 0xff, 0x1, 0xcfb, 0xffff, 0x7, 0x100, 0x7, 0x4, 0x4d, 0x7, 0x7c0c, 0x6, 0x21fa9694, 0xfffffffffffffffa, 0x1, 0x3, 0x3ff, 0x1, 0x1f]})
r1 = semget$private(0x0, 0x1, 0x0)
semop(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080))

03:38:43 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:43 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:44 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
r1 = semget$private(0x0, 0x1, 0x267)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:44 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:44 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:44 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
r2 = semget$private(0x0, 0x8, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
r3 = semget$private(0x0, 0x3, 0x26)
semctl$IPC_RMID(r3, 0x0, 0x10)
semctl$SEM_STAT(r2, 0x2, 0x12, &(0x7f00000000c0)=""/114)
semop(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:44 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x80)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000049b80)={{<r2=>0x0, 0xfffffffffffffff7, 0xff, 0x1000, 0x6, 0x80000001, 0x1, 0x8, 0xec4e, 0x4, 0x1, 0x6a, 0x9e3a, 0x800, 0x4}})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000004ab80)={<r3=>0x0, 0x0, "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", "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"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000056840)={<r4=>0x0, 0x0, "76b71c870371241a93a78d178b289b2722f98107f203bf58b2cff480ea96789c602ebbfb401dab116e30ccccb9135f1f4b983119c720b5a99fc859c4fbbc5112532d93b5fd16e3c604d0affb8f118dcb1123da17594c03a84f55a90f6979948dbcff39db5e4aa977b53d057145ad21f6746ef45b7e105f83d480b224472a6211b843556bbf6714aeace06553da311d64df3a319245c48a5e9a9c55ae9b2e0535a9691d8ec9762678aea5031c3d4790cd4cab2c9d2cf15e93b96094298c121dc5edc8be68f67e086be4caeb7650ec309c3d45b5ca46335dbafa651eb3b44d741e92c051574c13b55349f0d2f49ba4d8ca25c7ab6c79765b07a689629ac8a977a4", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057840)={0x7ead6fb6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r5=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r6=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x4, "33cbc6b6087bd2"})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x842, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000056640)={0x0, ""/256, <r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, <r9=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f0000056840)={<r10=>0x0, 0x0, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057840)={0x7ead6fb6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r11=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8, r9}, {0x0, r10}], 0x4, "33cbc6b6087bd2"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000004bb80)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000004bd80)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r13=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}], 0x40, "cef6b5fc3ecb60"})
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f000004cd80)={{<r14=>0x0, 0x1, 0x5, 0x7ff, 0x100, 0x1, 0x9, 0x5, 0x6bd5a180, 0x6, 0x2, 0x100000001, 0x20, 0x4, 0xfff}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000004dd80)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r3}, {0x0, r9}, {}, {0x0, r12}, {r13}, {r14}], 0x3, "f0badf66ade5f9"})

03:38:44 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
r2 = semget$private(0x0, 0x1, 0x0)
semop(r2, &(0x7f0000000180)=[{0x6, 0xd036, 0x2000}], 0x1)
semctl$IPC_RMID(r1, 0x0, 0x10)
semget(0x1, 0x1, 0x4)
semtimedop(r1, &(0x7f00000001c0)=[{0x2, 0x9, 0x800}], 0x1, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
r3 = semget(0x0, 0x3, 0x440)
clock_gettime(0x0, &(0x7f00000000c0)={<r4=>0x0, <r5=>0x0})
semop(r0, &(0x7f0000000140)=[{0x0, 0x6, 0x800}], 0x1)
semtimedop(r3, &(0x7f0000000040)=[{0x0, 0x6}, {0x1, 0x7, 0x800}], 0x2, &(0x7f0000000100)={r4, r5+60000000})

03:38:44 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(0xffffffffffffffff)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0)

03:38:44 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:44 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = timerfd_create(0x3, 0x0)
signalfd(r1, &(0x7f0000000040)={[0x4]}, 0x8)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000000)=0x13)

03:38:44 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(0xffffffffffffffff)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0)

03:38:44 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:44 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(0xffffffffffffffff)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0)

03:38:45 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x2}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:45 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:45 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[], 0xa)
close(r0)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000001, 0x0)

03:38:45 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000140), 0x0)
r1 = semget$private(0x0, 0x4, 0x80)
semtimedop(r1, &(0x7f0000000140), 0x0, &(0x7f0000000180)={0x77359400})
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x6, 0x1e00, 0x8000, 0x5])
clock_gettime(0x0, &(0x7f00000000c0))
semtimedop(r1, &(0x7f0000000080)=[{0x2, 0x8, 0x1800}, {0x1, 0x8, 0x1800}, {0x0, 0x8}, {0x2, 0x3f, 0x1000}, {0x1, 0x6, 0x1400}, {0x4, 0x7, 0x1000}, {0x1, 0x8, 0x1000}, {0x1, 0x7fff, 0x800}], 0x8, &(0x7f0000000100)={0x77359400})
semget(0x0, 0x3, 0x401)

03:38:45 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000040)={0x6, 0x1, 0x7f, 0x6376, 0x684, 0xd4ab})
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000000)=0x13)

03:38:45 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x27000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:45 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[], 0xa)
close(r0)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000001, 0x0)

03:38:45 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
r1 = semget$private(0x0, 0x2, 0x200)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x5, 0xe7, 0xe5be])
r2 = semget$private(0x0, 0x1, 0x210)
semctl$IPC_RMID(r2, 0x0, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:45 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x1000}, {0x3, 0x9, 0x1800}, {0x1, 0xf9, 0x1000}, {0x3, 0x8000}, {0x3, 0x8}, {0x2, 0x800, 0x1000}], 0x6)

03:38:45 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[], 0xa)
close(r0)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000001, 0x0)

03:38:45 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:45 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semop(r0, &(0x7f00000000c0)=[{0x1, 0x0, 0xc00}, {0x2, 0x9, 0x1800}], 0x2)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f0000000000)=[{0x4, 0x0, 0x800}, {0x0, 0x3, 0x800}, {0x4, 0x0, 0x800}, {0x1, 0x100, 0x1000}], 0x4)

03:38:46 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
clock_gettime(0x0, &(0x7f00000000c0)={<r2=>0x0, <r3=>0x0})
semtimedop(r1, &(0x7f0000000140)=[{0x1, 0x1, 0x800}, {0x1, 0xffff, 0x1000}, {0x1, 0x9, 0x1000}, {}, {0x1, 0x9, 0x800}, {0x1, 0x4, 0x800}, {0x2, 0x7fff}], 0x7, &(0x7f0000000100)={r2, r3+60000000})
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:46 executing program 3:
pipe(0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[], 0xa)
close(r0)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000001, 0x0)

03:38:46 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:46 executing program 3:
pipe(0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[], 0xa)
close(r0)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000001, 0x0)

03:38:46 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:46 executing program 3:
pipe(0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[], 0xa)
close(r0)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000001, 0x0)

03:38:46 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0xffff8828, 0x8004, 0x40, 0x9, 0x9, "2384f599a8a7e4442c4025657fd272cbc75950", 0x68})
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000000)=0x13)
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x6, 0x8, 0x3, 0xfd, 0x0, 0x4, 0xd500, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000100), 0x8}, 0x88, 0x3, 0x7fffffff, 0x5, 0x8, 0x3, 0x9, 0x0, 0x81, 0x0, 0x4000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000200)='6)\xd1\x00')

03:38:46 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:46 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000), 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
r1 = semget(0x1, 0x3, 0x400)
semop(r1, &(0x7f0000000000)=[{0x6, 0x1, 0x1800}, {0x3, 0x6, 0x800}, {0x3, 0x80, 0x1800}, {0x2, 0xfffb, 0x1000}, {0x4, 0x38, 0x1800}, {0x1, 0x7, 0x1000}, {0x1, 0x2, 0x1000}], 0x7)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:46 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:46 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:46 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000000080)=""/200)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:47 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000, 0x800}], 0x2)
semtimedop(r0, &(0x7f0000000000)=[{0x3, 0x0, 0x800}, {0x4, 0x20, 0x800}, {0x0, 0x2, 0x800}, {0x3, 0x2, 0x1000}, {0x2, 0x7, 0x1800}, {0x2, 0x3ff, 0x800}, {0x3, 0xf0f6, 0x800}, {0x0, 0x3f, 0x800}], 0x8, &(0x7f00000000c0)={0x77359400})
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:47 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:47 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:47 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000), 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
r2 = semget$private(0x0, 0x0, 0x106)
semctl$IPC_RMID(r2, 0x0, 0x0)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f0000000000)=[{0x2, 0x1, 0x1000}, {0x2, 0xfffa, 0x800}, {0x0, 0x401, 0x800}, {0x3, 0x797, 0x1000}, {0x4, 0x80ba, 0x800}, {0x1, 0x71, 0x1800}], 0x6)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:47 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:47 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:47 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0xff)

03:38:47 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:47 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:47 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:47 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:47 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
r1 = semget(0x3, 0x1, 0x140)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000))

03:38:47 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:47 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7a020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:47 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000040)={0x5, 0x14, 0x8, 0x4, 0x100000000, 0x100000000})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:48 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x1, 0x5, 0x7, 0xff7f])

03:38:48 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8cffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:48 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200), 0x0)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:48 executing program 5:
r0 = semget$private(0x0, 0x8, 0x20)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
r1 = semget$private(0x0, 0x8, 0x0)
r2 = semget$private(0x0, 0x8, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
r3 = semget$private(0x0, 0x8, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r3, &(0x7f00000000c0)=[{0x3, 0x9, 0x1000}, {0x0, 0x3f, 0x1000}, {0x2, 0x6, 0x800}, {0x4, 0xfff, 0x3800}, {0x4, 0x9, 0x1000}, {0x3, 0x0, 0x1000}, {0x2, 0x4}, {0x2, 0x6}, {0x2, 0x3, 0x1000}], 0x9, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x10)
semop(r2, &(0x7f0000000040)=[{0x1, 0x1ff, 0x1000}, {0x3, 0xa000, 0x800}, {0x2, 0x2, 0x800}, {0x4, 0x7, 0x1000}, {0x2, 0x1f40, 0x800}, {0x3, 0x1, 0x1000}, {0x0, 0x7ff, 0x1000}, {0x1, 0xd7a3, 0x800}, {0x3, 0xab7, 0x1000}, {0x2, 0x5, 0x1000}], 0xa)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x0, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semctl$IPC_RMID(r1, 0x0, 0x0)

03:38:48 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
write(r1, &(0x7f00000000c0)="b4", 0x1)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TCXONC(r2, 0x540a, 0x1)

03:38:48 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
r1 = semget(0x2, 0x0, 0x30)
semop(r1, &(0x7f0000000000), 0x0)
r2 = semget$private(0x0, 0x8, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f00000002c0)=0xe8)
semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000300)={{0x2, 0x0, r3, r4, 0xee01, 0x8, 0x8001}, 0x3, 0x101, 0x0, 0x0, 0x0, 0x0, 0xf9c7})
semctl$IPC_RMID(r2, 0x0, 0x10)
semtimedop(r2, &(0x7f0000000000)=[{0x4, 0x8, 0x800}, {0x3, 0xd3, 0x1800}, {0x0, 0x20, 0x1000}, {0x1, 0xb8, 0x800}], 0x4, &(0x7f0000000040)={0x0, 0x3938700})
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
semop(r0, &(0x7f00000000c0)=[{0x0, 0xe8, 0x1800}, {0x1, 0xffff}, {0x3, 0x3, 0x800}, {0x4, 0x6}, {0x98260e780bcdf7dd, 0x2, 0x800}, {0x1, 0xcf0e, 0x1c00}], 0x6)

03:38:48 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xefffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:48 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x3, 0x401, 0x9, 0x0, 0x8000])
clock_gettime(0x0, &(0x7f00000000c0)={<r1=>0x0, <r2=>0x0})
semtimedop(0x0, &(0x7f0000000080)=[{0x3, 0xfffd, 0x1000}, {0x4, 0x3, 0x1000}, {0x4, 0x0, 0x1800}], 0x3, &(0x7f0000000100)={r1, r2+10000000})

03:38:48 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200), 0x0)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:48 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
r1 = semget$private(0x0, 0x0, 0xa)
semtimedop(r1, &(0x7f0000000000)=[{0x2, 0x40, 0x800}, {0x2, 0xbb, 0x1400}, {0x1}], 0x3, &(0x7f0000000080))
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
semtimedop(r1, &(0x7f00000000c0)=[{0x3, 0x8, 0x1000}, {0x4, 0x100}, {0x1, 0x1000, 0x1800}, {0x1, 0xf0, 0x1800}], 0x4, &(0x7f0000000100))

03:38:48 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf6030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:48 executing program 2:
r0 = semget$private(0x0, 0x1, 0x60)
r1 = semget$private(0x0, 0x2, 0x100)
semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000000)=""/45)
semop(r1, &(0x7f0000000040)=[{0x4, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0', [{0x20, '!/@\'/x'}], 0xa, "efee8f424ee5294d4cef07c551536f705031e4117983b42fce89e1ac344bcdf6ddc99f9139c98a70687dbff041fc2a240a54fc8fe220a8b3d57eab3084f233d2017c3328c64c845c1027d37ce9e6a516d9af6c48197cbfac58543f73f729dec621d20d8d5b97621583f76ce5e570e23c7f18c071f61a4f54870c582a152dbb93616e0eb04bbcd0ceb4cd4629d754880120483a829a1847a08ffae31652bbdb01e1562d412adc333c565cd9a1cf274c8d9afefd37161f389f6c3176566f42aa22ec635c2dc55e4d034c80a9674a068258f9e418860359fee384c65e1f73965ce6d7"}, 0xf3)
semget$private(0x0, 0x4, 0x170)

03:38:48 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200), 0x0)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:48 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf6ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:48 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
r1 = semget$private(0x0, 0x2, 0x9)
semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000000)=""/9)
r2 = semget$private(0x0, 0x8, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semop(0xffffffffffffffff, &(0x7f0000000140)=[{0x2}], 0x1)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x10)
semctl$GETPID(r2, 0x1, 0xb, &(0x7f0000000080)=""/151)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:48 executing program 5:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:48 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='totmaps\x00')
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x31400, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)
r2 = syz_open_dev$vcsa(&(0x7f0000000180), 0x23, 0x10000)
setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f00000001c0)=0x8001, 0x4)

03:38:48 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{0x0}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:48 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfc010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:48 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)
syz_open_dev$tty20(0xc, 0x4, 0x1)
syz_open_pts(r0, 0x18000)

03:38:49 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semtimedop(r1, &(0x7f0000000040)=[{0x1, 0xfff8, 0x1000}, {0x2, 0x6, 0x1000}, {0x2, 0x7, 0x1c54e0b63128b565}, {0x0, 0x8000}, {0x1, 0x2, 0x1000}, {0x2, 0x452, 0x800}, {0x3, 0x2}], 0x7, &(0x7f00000000c0)={0x77359400})
r2 = semget$private(0x0, 0x8, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x10)
semtimedop(r2, &(0x7f0000000040), 0x0, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
semget(0x1, 0x0, 0x400)

03:38:49 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:49 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{0x0}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:49 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:49 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{0x0}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:49 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffff8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:49 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:49 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:49 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100))
r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8001, 0x81)
write(r2, &(0x7f0000000280)="e209932e55e6f0b0fd59307af6b65a24475ceea62be7c9bea6f54e090000e485419666daa01fa1e7b75b667a4ec367ec372a5d0dcf424a4d5d61737682b5a3610ce325f5ffd05a1bc6bbb909acee6078b409866acaea871401e2a81091048cc3b7432493add4c1415b10dd19f30474ce85d2ee2d98cb761b493497a527a0814b3225d5b3f758592a2defb7a68c3e4b7413549bb30aace615a951b6ef308bd7732ea03d06ac81e2e38e73209637cccbb528313a4a9ba4454df2225192b459b6ce77ad6afa5ac5019e96487f5514eec548efab60b89bbc8089b153336cacc5818608e92d47f9adfb0c6d1c5184c0fed824257a37b5e694cbac457daf2135bd34429fa1e83dca1bdda7797d", 0x10a)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r4 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xfff}}, 0x0, 0xffffffffffffffff, r4, 0x0)
read(r5, &(0x7f0000001180)=""/192, 0xc0)
ioctl$TCXONC(r0, 0x540a, 0x2)
pwrite64(r5, &(0x7f0000000180)="099cbe37c5b6d7810868044d547b7822b32c6ccc14f07d9fdd613491391e14d26e933b7f363cc6a57a60fee15a41f5d145fb3e662e3e87e75cad4fdd34670e857ddece715e1afc4e3706ba96391e05c0141d504c52ef6b7c653d6a1317e20f1f36be6a5a4839489cfbc39ccc7c68e6bb4808ebbc0217fd2bd157563636a8858e06a578baf0e5eff3a58b1d8a196981a0256b59444034025f67f756d866004151eacc4268", 0xa4, 0x80)
ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000240)={0xde, 0x80000001, 0x7ff, 0x7, 0x7f, "6adc00be5c693221b5af267a2118da9c9b0c7b", 0x2, 0x10000})

03:38:49 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)
syz_open_dev$tty20(0xc, 0x4, 0x1)
syz_open_pts(r0, 0x18000)

03:38:49 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:49 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f0000000000)=[{0x2, 0x4}], 0x1)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SEM_STAT(r1, 0x0, 0x12, &(0x7f00000000c0)=""/4096)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:49 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x4, 0x63, 0x0, 0x9])
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
r1 = semget(0x3, 0x1, 0x140)
semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000000c0)=""/164)
semop(r0, &(0x7f0000000180)=[{0x0, 0x8001}, {0x4, 0x7}, {0x4, 0x9, 0x800}, {0x2, 0x8d, 0x1000}, {0x3, 0x1, 0x1800}, {0x2, 0xb0a, 0x1800}, {0x1, 0x6}, {0x2, 0x7fff, 0x800}, {0x0, 0x200, 0x800}, {0x0, 0x101}], 0xa)
semctl$IPC_RMID(r1, 0x0, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:49 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:49 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:49 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
ioctl$TCXONC(r1, 0x540a, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000000)=0x13)

03:38:49 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:49 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)
syz_open_dev$tty20(0xc, 0x4, 0x1)
syz_open_pts(r0, 0x18000)

03:38:49 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00\x00\x00', 0x4}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:49 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:49 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:49 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00\x00\x00', 0x4}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:49 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000001000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1597.275144][ T8290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8290 comm=syz-executor.3
[ 1597.324538][ T8305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8305 comm=syz-executor.3
03:38:50 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
r1 = semget$private(0x0, 0x0, 0x260)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100))
semop(r0, &(0x7f0000000000)=[{0x1, 0x3, 0x41d9fd70083844a0}, {0x2, 0x6, 0x1000}, {0x4, 0x3f, 0x1000}, {0x4, 0x926f, 0x800}], 0x4)
semget$private(0x0, 0x4, 0x15)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:50 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{0x3, 0x3}, {0x0, 0xf000, 0x1800}], 0x2)
r1 = semget$private(0x0, 0x4, 0x0)
semop(r1, &(0x7f0000000040)=[{0x2, 0x800, 0x1800}, {0x4, 0xfc00, 0x800}, {0x4, 0x4, 0x1000}], 0x3)
r2 = semget(0x2, 0x4, 0x200)
semctl$IPC_RMID(r2, 0x0, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:50 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00\x00\x00', 0x4}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:50 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:50 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)
syz_open_dev$tty20(0xc, 0x4, 0x1)

03:38:50 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
semtimedop(0x0, &(0x7f0000000000)=[{0x1, 0x8001, 0x800}, {0x4, 0x0, 0x800}, {0x3, 0x0, 0x1800}, {0x2, 0x9, 0x800}, {0x1, 0x9}], 0x5, &(0x7f0000000080))
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f00000000c0)=[{0x4, 0x7, 0x800}, {0x3, 0x7, 0x1800}, {0x1, 0x40, 0x800}, {0x4, 0x6}, {0x1, 0x8001, 0x1000}, {0x3, 0x8001}], 0x6)

03:38:50 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x1b)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:50 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xd8b, 0x1000}, {0x2, 0x1, 0x1000}], 0x2, &(0x7f00000000c0)={0x0, 0x3938700})
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x0])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:50 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400", 0x6}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:50 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:50 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400", 0x6}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 1598.116246][ T8334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8334 comm=syz-executor.3
03:38:50 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:50 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400", 0x6}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:50 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f0000000040)="b4", 0x1)
syz_open_dev$tty20(0xc, 0x4, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000100)=0x13)

03:38:50 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:50 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:50 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:51 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:51 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:51 executing program 0:
r0 = semget$private(0x0, 0x8, 0xd0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:51 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:51 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
r1 = semget$private(0x0, 0x4, 0x4)
semop(r1, &(0x7f0000000180)=[{0x0, 0xfffc, 0x1800}], 0x1)
semget$private(0x0, 0x1, 0x200)
r2 = semget(0x2, 0x4, 0x0)
semtimedop(r2, &(0x7f0000000080)=[{0x2, 0x23d9, 0xc00}, {0x1, 0x1000}, {0x0, 0x8000}, {0xe, 0xd3c, 0x1000}, {0x1, 0x3, 0x800}, {0x1, 0x8001, 0x1000}, {0x4, 0x6}, {0x1, 0x3}], 0x8, &(0x7f00000000c0)={0x0, 0x989680})
r3 = semget(0x1, 0x0, 0x448)
r4 = semget$private(0x0, 0x8, 0x0)
semop(r4, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r4, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r4, 0x0, 0x10)
semop(r4, &(0x7f0000000140)=[{0x3, 0x1}, {0x3, 0x4, 0x1000}, {0x1, 0x140, 0x800}, {0x1, 0x20}, {0x3, 0x4}, {0x2, 0x8, 0x1000}], 0x6)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000100)=[0x7fff, 0x9, 0x1])
semop(r2, &(0x7f0000000140), 0x0)
r5 = semget(0x3, 0x1, 0x230)
semop(r5, &(0x7f0000000000)=[{0x0, 0x8, 0x1800}, {0x3, 0x4}, {0x0, 0xffff, 0x4924ad8a92b95ba2}, {0x4, 0x5, 0x1800}, {0x3, 0x3, 0x800}], 0x5)

03:38:51 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:51 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10000010000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:51 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:51 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, 0x0, 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:51 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40000100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:51 executing program 4:
connect$unix(0xffffffffffffffff, &(0x7f0000001300)=@file={0x1, './file0\x00'}, 0x6e)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(0xffffffffffffffff, &(0x7f0000000280)="fc3c1aeaadcad2507cdabcc85ad9f90ec6eca0e55d007519a7d57d9eb36608d6d8061ce7b0535640270bced099620abd8129f5912fa842e71cdd4a8cd49050b80b770009f002bd", 0x47)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x8010, r0, 0x0)
preadv(r2, &(0x7f0000000280), 0x45, 0xda1, 0x0)
clone(0x54041bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = getpid()
tkill(r3, 0x14)
ptrace(0x4206, r3)
ptrace$getsig(0x4202, r3, 0x0, &(0x7f0000000000))
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc)
eventfd(0x2)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000180)={"5e8c086a2e7c98aa9e10a885f88a680c", 0x0, 0x0, {0xfffffffffffffffc, 0x2}, {0xe50c, 0x202}, 0x7, [0x8, 0xffff, 0x400, 0x9, 0xfb, 0x8, 0x2, 0x5, 0xfffffffffffffffe, 0x200, 0x40, 0x1, 0x1, 0x2, 0x1, 0xfffffffffffffff9]})

03:38:51 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, 0x0, 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:51 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:51 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:52 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000180)=[{0x1}, {0x3, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f0000000140)=[{0x3, 0x7, 0x800}, {0x3, 0x5, 0x800}, {0x2}, {0x4, 0x401, 0x1000}, {0x0, 0x4}, {0x0, 0x200}, {0x1, 0x0, 0x1000}, {0x0, 0x6}, {0x1, 0xff01, 0x1000}, {0x0, 0x7, 0x1000}], 0xa)
r2 = semget(0x2, 0x1, 0x0)
semop(r2, &(0x7f00000001c0)=[{0x0, 0x1, 0x800}, {0x3, 0x75, 0x800}, {0x0, 0x8}, {0x0, 0x6}, {0x0, 0xa56, 0x1000}], 0x5)
semop(0x0, &(0x7f0000000040)=[{0x2, 0x7, 0x800}, {0x4, 0x400, 0x1800}, {0x3, 0x0, 0x800}, {0x2, 0x2, 0x1000}, {0x8425133bf2564b90, 0xffb5, 0x800}, {0x2, 0xfffc}, {0x1, 0x7ff, 0x1000}], 0x7)
semctl$GETVAL(r0, 0x0, 0xc, &(0x7f00000000c0)=""/66)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:52 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, 0x0, 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:52 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:52 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:52 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(0xffffffffffffffff)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:52 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semtimedop(r1, &(0x7f0000000000)=[{0x3, 0x3}, {0x1, 0x3ff, 0x1800}, {0x4, 0x2, 0x1000}], 0x3, &(0x7f0000000080))
semop(r1, &(0x7f0000000100)=[{0x1, 0x20, 0x1800}, {0x3, 0x9, 0x1000}, {0x2, 0xead, 0x1800}, {0x2, 0x5, 0x1000}, {0x4, 0x9, 0x800}, {0x4, 0x73aa, 0x1000}, {0x2, 0x1, 0x1000}], 0x7)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
semctl$IPC_RMID(r0, 0x0, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000000c0)=[0x5])

03:38:52 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(0xffffffffffffffff)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:52 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x202000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:52 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x5, 0x0, 0x0, 0x0, "000000001de553ac2000e42d00000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800007, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
r3 = getpgid(0x0)
wait4(r3, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r4)
write$binfmt_elf64(r5, 0x0, 0x611)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f0000000000)=0x13)

03:38:52 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(0xffffffffffffffff)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:52 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:52 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:53 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13)

03:38:53 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x0, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:53 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:53 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0xffffff7f, 0xfffffffc, 0x0, 0x0, "000800dc9b942e3900332f000007000000c000"})
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040))
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:53 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x0, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:53 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, &(0x7f0000000000)=""/39)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:53 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
r2 = semget$private(0x0, 0x8, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x10)
semop(r2, &(0x7f0000000040)=[{0x2, 0x5, 0x1000}, {0x4, 0xfff, 0x800}, {0x4, 0xfffa, 0x800}, {0x0, 0x1, 0x800}, {0x0, 0x8, 0x800}, {0x4, 0x2, 0x1800}], 0x6)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semctl$IPC_RMID(r1, 0x0, 0x0)
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:53 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:53 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x0, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:53 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:53 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:53 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:54 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13)

03:38:54 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x9)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc)
write$cgroup_freezer_state(r2, &(0x7f0000000140)='THAWED\x00', 0x7)
openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x1c7301, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x705203, 0xc0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r3, &(0x7f00000001c0)=0x400, r4, &(0x7f0000000200)=0x2, 0x3, 0xa)
pipe(&(0x7f0000000240)={<r5=>0xffffffffffffffff})
ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f0000000180)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
write(r4, &(0x7f0000000280)="0a9a3106be0c75a41347a21baaaab68c4243b0edc50343eba635c289475d232258189e64af7715613de88b074ab21ef2d21cd8c2ca553310fa91187eac8ad56008f5fe4470008b149629b95750489031f634af9dbf903291b79f4097ba50ea7b98e49d0786a7bb70b619bdcf6dd32fba7ece5856a1eac8dc43eb5b2d048669df091e739ffe7681ae7321e6048973123ce459495c19ba05f0423612758d5baae3f0223ba9488542a41cbffe02d300964ad51752b9dbb3e27c052d5c16d9a9a40899d4ee07927e9a3c1e1317d6838b7819bf87200716b0d0a13c0436e5398eb42a8c6bbc0c04fdd9100b4a097ba32e1d12fcbee4ae1e", 0xf5)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f0000000000)=0x13)

03:38:54 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x7f, 0x5b, 0x7fff, 0x2, 0x401, 0x5])

03:38:54 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:54 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x900000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:54 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:54 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:54 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:54 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
r1 = semget(0x0, 0x0, 0x640)
semctl$GETPID(r1, 0x3, 0xb, &(0x7f00000000c0)=""/216)
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
r2 = semget$private(0x0, 0x8, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r3=>0x0, <r4=>0x0})
semtimedop(r2, &(0x7f0000000040)=[{0x3, 0x3f, 0x800}, {0x0, 0x69e5}, {0x2, 0x79}, {}, {0x3, 0x7, 0x800}, {0x4, 0x6, 0x800}], 0x6, &(0x7f0000000200)={r3, r4+10000000})

03:38:54 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
r1 = semget$private(0x0, 0x8, 0x0)
r2 = semget$private(0x0, 0x8, 0x0)
semtimedop(0x0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x10)
semop(0x0, &(0x7f00000001c0)=[{0x4, 0x0, 0x800}, {0x4, 0xf801, 0x1000}, {0x4, 0x9, 0x1000}, {0x4, 0xc188, 0x800}, {0x0, 0x0, 0x1000}, {0x2, 0x65, 0xc00}, {0xd0b7ed6f485a6a1a, 0xfff, 0x1c00}], 0x7)
semop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x3, 0x2, 0x800}, {0x1, 0x2}], 0x3)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x10)
clock_gettime(0x0, &(0x7f0000000140)={<r3=>0x0, <r4=>0x0})
semtimedop(r2, &(0x7f0000000100)=[{0x4, 0x7fff, 0x800}, {0x2, 0x7fff, 0x1000}], 0x2, &(0x7f0000000180)={r3, r4+10000000})
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
clock_gettime(0x0, &(0x7f0000000080)={<r5=>0x0, <r6=>0x0})
semtimedop(r1, &(0x7f0000000000)=[{0x3, 0x27}, {0x1, 0xfbff, 0x1000}, {0x1, 0xa78, 0x1000}, {0x4, 0x9, 0x800}], 0x4, &(0x7f00000000c0)={r5, r6+60000000})

03:38:54 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xb00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:54 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:55 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13)

03:38:55 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xc00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:55 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:55 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x8000, 0x0, 0x10000, 0xfffffffe, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:55 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180), 0x0)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:55 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xd00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:55 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180), 0x0)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:55 executing program 4:
sched_setattr(0xffffffffffffffff, &(0x7f00000000c0)={0x38, 0x0, 0x1, 0x39, 0x9, 0x100000000, 0x9, 0x7, 0x0, 0xffffffff}, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
sched_setattr(0xffffffffffffffff, &(0x7f0000000380)={0x38, 0x1, 0x61, 0x8, 0x0, 0x200, 0x100000001, 0xf9, 0xffffffff, 0x3}, 0x0)
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x2, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000180)="ff385d813dd7702448bf271285d3e4c01b397048905cbca67e5e3da1cbc43c2b41b9b0eb6470ca8e423f1a016be51f1abd3e48db0e8f72b7d4a8d21f204e1e19e5d433c3f89b1a6e0dc4a22f59901078a2d4f882e44f526b989c303c6aed22d605ac15358203438fa5dcfe1c868f9c58c0010dc91b0273dfa1b66250b114e9db5dcd5fcc201244becdf0a9cfd514c9134c4fc642f4f5aaf0a5c0cdee107ea340385fe14f53311d1bbf7f848e794cdc19c0c7cfdbe2b4a1834694a29e514eae0c57fa8348dabd428e6867d3fbdca95eb3ffad9aa027ab0d90bcb9bb891e078fd4c1fadc1954c67de9e179098ea777c3635c6c36", 0xf3, 0x8000}, {&(0x7f0000000280)="cb6d9e401619767ee1aeab62fc336fe266082780897086e2634682544845652eb1d6488a02d488d2a10a5f593bacbf08ada6083136dbebb6a970e66fa28ae136ac159bac5d01ef35a111d25e5e096a5b677e714172fd7298726fb07babf550a9790caf034abfacbb4d3a8263662ab4afe9f5c283defaab59a582", 0x7a, 0x7fff}], 0x11010, &(0x7f0000000340)={[{}, {}, {}]})
r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0xb45532863ef75ea0, 0x0, 0xfffffffe, 0x0, 0xbf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0xffffffffffffffff, r1, 0x0)
write(r1, &(0x7f0000000540)="814dc9b2cc8fe0658917ec5e1927fb112cf59cba00c67ce73b2bacf991087a352c905fffe6ab2865d6cedd3fa9881700547cdb8d8a96ea15d163c8095c3742ca7011d19740d1e9e4acd361b907f491df1232efdd23b58c3dd80300887be3a26cb35a22c9cd82d68382de88bc6d4779eb8695263a7c475435017e368f8c0139299953bf1efcce965b7f4ce8e909ca400000000000000000cc2f55e729a733e3ef4ec2a297d6b5f0b23fbeaa61dff42e280935727079d07eb06fe394f93a3afb6309ac69601747291be43aa75c0000000000000000", 0xd4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
r3 = getpgid(0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$unix(r2, &(0x7f00000074c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="00000000140000000000000001000000010000000083e000feffcc0a5a31deb552009412dc7881a7ae81dca758101aa03045e977575881b032888a674c378ed6b4c7f349660eaf27dee28928c97a02c4054d4749dbff4a6fe2d8bbebc36d2641d279b7bb77bc749252504a7a0e4af761e49e029f3c4a669c6e159d18c127676fb6d54cc46934ac783e9084e78d59a0f7f5fdcede467c010c65e2c0774846f847a06d201e87cd979d7bdbeaad410e1c25a478b14cee8ab56efb4444dbb4db3e2b2d6df660744a0dfa043870df7da736c24d94e81a91f2a2cf87a978", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x38}], 0x1, 0x0)
r5 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r5, 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0xa6, 0x82, 0x3, 0x7f, 0x0, 0xfffffffffffffeff, 0x2000, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0xedcb, 0xfffffffffffffff9}, 0x8200, 0x5, 0xffffffd9, 0x2, 0x7fff, 0x2, 0xff58, 0x0, 0x9, 0x0, 0x26}, r3, 0x8, r5, 0x8f607e78f4705c46)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f0000000000)=0x13)

03:38:55 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180), 0x0)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:55 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:55 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x1, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = getpgid(0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000074c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000aa123a6ecc0f9ea032d1090cd117c0579c00"/37, @ANYRES32=r1, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000f3ff"], 0x38}], 0x1, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
r5 = getpgid(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000074c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x30, 0x4000084}], 0x1, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, <r7=>0x0}, &(0x7f0000000280)=0x5)
setuid(r7)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000100), 0x0, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r1, r4, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}], 0x60, 0x4000000}, 0x800)
r8 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r8, 0x5412, &(0x7f0000000000)=0x13)

03:38:55 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f0000000080)=[{0x2, 0xaad6}, {0x7, 0x8, 0x800}, {0x2, 0x8001, 0x1800}, {0x4, 0x3ac, 0x1800}, {0x0, 0xffff, 0x800}, {0x0, 0x3f}, {0x4, 0x5, 0x1800}, {0x1, 0x400, 0x1800}, {0x2, 0x1, 0x1000}], 0x9)
r2 = semget(0x1, 0x1, 0x12b)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000040)=[0x1fd])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:56 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:56 executing program 2:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000080))
r1 = semget$private(0x0, 0x1, 0x88)
semop(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080))

03:38:56 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012", 0x5)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:56 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:56 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000), 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x8a, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x8000400)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}}, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}}, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, @thr={&(0x7f00000001c0)="994abf823bea8976f6622bb6db317c567b75b14769b9291e848c3df8901128f916545a9d1d38c308e7c636086cd292079650db0bc4ff3bb224e8c0fd", &(0x7f0000000340)="d67f25cffbf40edd549cc38ec3e90471e2ba389f57cca8b20eeac3953fe449cfe6e955fa9b1f9025dd3d11b98bc8447ec2fed0f63954ffce95324d684be137e93693c3ba364b4d4d4f44eb5bb9ddeab9d8006ec5d81288167091bffbfdcd73d81ea22e4fde8502fd609f70083d9b9f4706af4e338486604ed29a42025239b16e447f22a229"}}, &(0x7f0000000280))
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
syz_open_dev$tty20(0xc, 0x4, 0x0)

03:38:56 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:56 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:56 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012", 0x5)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:56 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:56 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:56 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012", 0x5)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:56 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:56 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:56 executing program 2:
r0 = semget$private(0x0, 0x3, 0x404)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:56 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f", 0x7)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:56 executing program 0:
r0 = semget$private(0x0, 0x1, 0x240)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040)=[{0x1, 0x8, 0x1800}, {0x0, 0x200}, {0x0, 0x82, 0x1800}, {0x4, 0x2, 0x1800}], 0x4, &(0x7f00000000c0)={0x0, 0x3938700})
semop(r0, &(0x7f0000000100)=[{0x3, 0x101}], 0x1)
semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000140))
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semop(0xffffffffffffffff, &(0x7f00000001c0)=[{0x1, 0x3, 0x800}, {0x2, 0x3f}, {0x2, 0x40, 0x1000}, {0x0, 0x3fc0, 0x1800}], 0x4)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000140)={{0x1, r2, 0xee01, 0xee00, 0x0, 0x1, 0x9}, 0x6, 0x7fff})
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:56 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040))
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000000)=0x13)

03:38:56 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:56 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:56 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f", 0x7)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:56 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:56 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f", 0x7)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:57 executing program 2:
r0 = semget$private(0x0, 0x3, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000280)=[0x6, 0x7, 0x1, 0x3b, 0x7, 0x8000, 0x2, 0x4])
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
r2 = semget(0x3, 0x2, 0x0)
statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x88c, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(0x0, r5, 0x0)
semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000200)={{0x0, 0xee00, r3, 0xee00, r5, 0x15, 0x33a3}, 0x83, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5})
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f0000000000)=[{0x3, 0x7ff, 0x1000}, {0x0, 0x9, 0x1000}, {0x1, 0x5, 0x800}, {0x4, 0x6, 0x800}], 0x4)

03:38:57 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:57 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:57 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f", 0x7)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:57 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:57 executing program 0:
r0 = semget$private(0x0, 0x8, 0x11c)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:57 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)
r2 = fcntl$dupfd(r0, 0x406, r1)
ioctl$KDFONTOP_COPY(r2, 0x4b72, &(0x7f0000000040)={0x3, 0x0, 0xf, 0x3, 0x27, &(0x7f0000000180)})

03:38:57 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:57 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f", 0x7)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:57 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:57 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:57 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f", 0x7)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:57 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:57 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:57 executing program 5:
write(0xffffffffffffffff, &(0x7f00000000c0)="b4", 0xfdef)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000000)=0x13)

03:38:57 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x1, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00", 0x7})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:57 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:58 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf003}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x2aaaaaaaaaaaab41, 0x0)
semop(r0, &(0x7f0000000140)=[{0x2, 0x5}, {0x2, 0x6, 0x1000}, {0x0, 0x7, 0x2800}, {0x1, 0x5, 0x1000}, {0x1, 0x1, 0x1800}], 0x5)
r1 = semget(0x3, 0x0, 0x42)
clock_gettime(0x0, &(0x7f00000000c0)={<r2=>0x0, <r3=>0x0})
semtimedop(r1, &(0x7f0000000040)=[{0x2, 0x4}], 0x1, &(0x7f0000000100)={r2, r3+60000000})
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:58 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:58 executing program 5:
write(0xffffffffffffffff, &(0x7f00000000c0)="b4", 0xfdef)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000000)=0x13)

03:38:58 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:58 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040), 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:58 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "8000000010ddff00"})
write(r0, &(0x7f0000000040)="d7", 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TCXONC(r0, 0x540a, 0x1)

03:38:58 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000))
semop(r0, &(0x7f0000000000)=[{0x3, 0x7, 0x3800}, {0x1, 0xe940, 0x800}], 0x2)
semctl$GETPID(r0, 0x3, 0xb, &(0x7f0000000080)=""/251)

03:38:58 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:58 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x3)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000000)=0x13)

03:38:58 executing program 5:
write(0xffffffffffffffff, &(0x7f00000000c0)="b4", 0xfdef)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000000)=0x13)

03:38:58 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:58 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
semop(r0, &(0x7f0000000000)=[{0x0, 0x2238, 0x800}, {0x4, 0xf801, 0x800}, {0x1, 0x5, 0x1800}, {0x4, 0x1ff, 0x1800}, {0x1, 0x8, 0x1000}], 0x5)

03:38:59 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:59 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7a02000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:59 executing program 5:
syz_open_dev$tty20(0xc, 0x4, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="b4", 0xfdef)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000000)=0x13)

03:38:59 executing program 2:
r0 = semget$private(0x0, 0x0, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:38:59 executing program 0:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = semget$private(0x0, 0x8, 0x0)
r1 = semget$private(0x0, 0x3, 0x40)
semop(r1, &(0x7f0000000000)=[{}, {0x0, 0xf000, 0x1000}], 0x2)
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semop(r1, &(0x7f0000000040)=[{0x1, 0x1000, 0x1800}, {0x2, 0x7ff, 0x800}], 0x2)
r2 = semget$private(0x0, 0x8, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semop(r2, &(0x7f0000001200)=[{0x2, 0x5}, {0x3, 0x54bc, 0x800}, {0x4, 0xff1b}, {0x3, 0x1ff, 0x800}, {0xc7be2b243f74b676, 0x100}, {0x0, 0x1, 0x800}], 0x6)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x10)
semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000100)=""/4096)
r3 = semget$private(0x0, 0x0, 0x440)
semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000001100)=""/223)
semop(r3, &(0x7f00000000c0)=[{0x0, 0x5, 0x1000}, {0x1, 0x1}, {0x2, 0x1, 0x1000}], 0x3)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:38:59 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:59 executing program 5:
syz_open_dev$tty20(0xc, 0x4, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="b4", 0xfdef)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000000)=0x13)

03:38:59 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xb8)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x7f, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00", 0x4, 0x2})
write(r0, &(0x7f0000000180)="00e3ed0b6a2a41e03dcbdee7fed6cb994fdd8062abe9330939773dde3b688ca923d9e36be791950b8f26213a7d09391d69deb09968e91be1758182dabcdf4c7a37006f69776244d65e91093c8d3c", 0x4e)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:59 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8cffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:59 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:59 executing program 5:
syz_open_dev$tty20(0xc, 0x4, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="b4", 0xfdef)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000000)=0x13)

03:38:59 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:38:59 executing program 4:
clock_gettime(0x0, &(0x7f0000000100)={<r0=>0x0, <r1=>0x0})
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, &(0x7f0000000180), &(0x7f0000000200)={r0, r1+60000000}, 0x8)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r2, &(0x7f00000000c0)="b4", 0xfdef)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f0000000000)=0x13)
recvmmsg(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/24, 0x18}, {&(0x7f0000000280)=""/26, 0x1a}], 0x2}, 0x1}, {{&(0x7f0000000300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000380)=""/96, 0x60}], 0x1, &(0x7f0000000440)=""/41, 0x29}, 0x4}, {{&(0x7f0000000480)=@tipc=@name, 0x80, &(0x7f0000000880)=[{&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f00000005c0)=""/144, 0x90}, {&(0x7f0000000680)=""/231, 0xe7}, {&(0x7f0000000780)=""/69, 0x45}, {&(0x7f0000000800)=""/115, 0x73}], 0x5}, 0x80000000}, {{&(0x7f0000000900)=@can, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000980)=""/91, 0x5b}, {&(0x7f0000000a00)=""/87, 0x57}, {&(0x7f0000000a80)=""/192, 0xc0}, {&(0x7f0000000b40)=""/247, 0xf7}, {&(0x7f0000000c40)=""/183, 0xb7}, {&(0x7f0000000d00)=""/12, 0xc}], 0x6, &(0x7f0000000dc0)=""/90, 0x5a}, 0x2}], 0x4, 0x40002140, 0x0)

03:38:59 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600), 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:38:59 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, 0x0, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:38:59 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:39:00 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:39:00 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf603000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:39:00 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600), 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:00 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, 0x0, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:00 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
r2 = semget$private(0x0, 0x8, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080))
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x10)
semop(r2, &(0x7f00000000c0)=[{0x4, 0x5, 0x800}, {0x2, 0x6, 0x1000}, {0x3, 0x4, 0x1000}, {0x0, 0x101, 0x1000}, {0x4, 0x7ff}], 0x5)
semop(r1, &(0x7f0000000000)=[{0x1, 0x5}, {0x0, 0x1, 0x800}, {0x4, 0x9, 0x1000}, {0x3, 0x924, 0x1000}, {0x4, 0x88d5, 0x800}, {0x2, 0x9}], 0x6)

03:39:00 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, 0x0, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:00 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf6ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:39:00 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600), 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:00 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000000)=0x13)

03:39:00 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfc01000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:39:00 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000000c0), 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:00 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{0x0}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:01 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{0x0}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:01 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfeffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:39:01 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000000c0), 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:01 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
clock_gettime(0x0, &(0x7f0000000180)={<r1=>0x0, <r2=>0x0})
semtimedop(r0, &(0x7f0000000140)=[{0x0, 0x1, 0x1000}, {0x1, 0x0, 0x1800}, {0x1, 0x3, 0x1800}, {0x1, 0x0, 0x1800}], 0x4, &(0x7f00000001c0)={r1, r2+10000000})
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
semop(r0, &(0x7f0000000100)=[{0x1, 0x8e0, 0x800}, {0x1, 0xfff}, {0x2, 0x2}], 0x3)
r3 = semget$private(0x0, 0x0, 0x20)
semtimedop(r3, &(0x7f0000000200)=[{0x3, 0x66c, 0x1000}, {0x4, 0x7, 0x400}, {0x1, 0x1f, 0x800}, {0x1, 0x5, 0x800}, {0x3, 0x9, 0xc00}, {0x3, 0x3}, {0x2, 0x7, 0x800}], 0x7, &(0x7f0000000240)={0x0, 0x989680})
semop(r3, &(0x7f00000002c0)=[{0x0, 0x8, 0x1800}], 0x1)
r4 = semget(0x0, 0x2, 0x8)
semop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(0x0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x10)
semctl$GETNCNT(0x0, 0x1, 0xe, &(0x7f0000000300)=""/19)
semop(r4, &(0x7f0000000280)=[{0x1, 0x8000, 0x1800}], 0x1)
semop(r3, &(0x7f00000000c0)=[{0x4, 0x2}, {0x4, 0xb7, 0x800}, {0x1, 0x7, 0x800}, {0x1, 0x4c}, {0x3, 0x6683}, {0x3, 0x8, 0x1000}, {0x3, 0x3d}, {0x3, 0x5}, {0x1, 0x4, 0x1000}, {0xe3aa75aff48e7f45, 0x6, 0x1000}], 0xa)
semop(r0, &(0x7f0000000040)=[{0x5, 0x2}], 0x1)

03:39:01 executing program 2:
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x23c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x8001}, {0x8, 0x13, 0x3}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xffe0}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x5}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0xffff}, {0x8, 0x13, 0x7}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0xffff}, {0x8, 0x13, 0x8}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x649}, {0x6, 0x11, 0xc}, {0x8}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x3}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xff}, {0x8, 0x13, 0x4}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0xfea}, {0x8, 0x13, 0x3ff}, {0x5, 0x14, 0x1}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4080}, 0x40)
semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080))

03:39:01 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:39:01 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000000c0), 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:01 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{0x0}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:01 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:01 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:01 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x400, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000040))
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:01 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:39:01 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f0000000000)=[{0x4, 0x8}, {0x1, 0x0, 0x1000}, {0x3, 0x0, 0x1000}], 0x3)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:39:01 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:39:01 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:02 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x3ff, 0x100, 0x48])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:39:02 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:02 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:39:02 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x3, 0xeaad, 0x7, 0x0, 0x0, "000000001de553c82000000000000010ddff00", 0x200})
r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0)
write(r1, &(0x7f00000000c0)="b4", 0x1)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000100))
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x8)

03:39:02 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:02 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:02 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:39:02 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693", 0x4}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:02 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x100, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

[ 1609.624855][ T9141] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1609.633305][ T9141] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:39:02 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x4, 0x101, 0xffff, 0x5])

03:39:02 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693", 0x4}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:02 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000001, 0x12, 0xffffffffffffffff, 0x13f09000)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:03 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0xf9, 0x40])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
semtimedop(r0, &(0x7f00000000c0)=[{0x2, 0x5, 0x1400}, {0x0, 0x88, 0x1800}, {0x4, 0x8, 0x1000}, {0x1, 0x3f, 0x1800}, {0x1, 0x1000, 0x1800}, {0x2, 0x8eb, 0x1800}, {0x4, 0x8000, 0x400}], 0x7, &(0x7f0000000140)={r1, r2+10000000})
semop(r0, &(0x7f0000000180)=[{0x1, 0x2, 0x1800}, {0x3, 0x7f, 0x2800}, {0x1, 0x3f, 0x1800}, {0x1, 0x4, 0x1000}, {0x1, 0x9, 0x800}, {0x0, 0x1, 0x1000}, {0x0, 0x80, 0x1000}], 0x7)

03:39:03 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693", 0x4}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:03 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040), 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000140), 0x0, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f0000000100)=[{0x0, 0x1}, {0x2, 0xfc00, 0x800}], 0x2)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
semctl$SEM_STAT(r0, 0x1, 0x12, &(0x7f0000000040)=""/10)
r4 = semget(0x1, 0x2, 0x420)
semctl$GETNCNT(r4, 0x4, 0xe, &(0x7f0000000180)=""/127)
semtimedop(r0, &(0x7f0000000140)=[{0x3, 0x8000, 0x800}], 0x1, 0xffffffffffffffff)
semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xb3, 0x1800}, {0x0, 0x3}, {0x0, 0x80, 0x1800}], 0x3, &(0x7f00000000c0)={r2, r3+10000000})
semctl$IPC_RMID(r0, 0x0, 0x0)

03:39:03 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000100))
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000000)=0x13)

03:39:03 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:39:03 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:03 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce69", 0x6}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:03 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0xfffffffc, 0x0, 0x0, 0x0, "00ff00", 0x0, 0x4})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:03 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:03 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce69", 0x6}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 1610.459676][ T9190] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1610.468354][ T9190] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:39:03 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:03 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce69", 0x6}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:03 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:03 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040))
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:03 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semtimedop(r1, &(0x7f0000000000)=[{0x4, 0x200, 0x1800}], 0x1, &(0x7f0000000080))
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:39:03 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:39:03 executing program 0:
r0 = semget$private(0x0, 0x3, 0x1)
semop(r0, &(0x7f0000000000), 0x0)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000040))
r2 = semget$private(0x0, 0x8, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x10)
semop(r2, &(0x7f0000000040)=[{0x0, 0x1, 0x800}, {0x2, 0x1, 0x1000}, {0x4, 0x5, 0x800}, {0x0, 0x6, 0x1000}, {0x2, 0x800, 0x1800}], 0x5)
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:39:03 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:03 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:04 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, 0x0, 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:04 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:04 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0xfff, 0x75}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x8, 0x3, 0x3f, 0xc, "59cdbb1bdf84c7414c0d5ebab29e1f60b0ba32", 0x2, 0x10000})
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

[ 1611.397376][ T9251] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1611.405726][ T9251] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:39:04 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:04 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, 0x0, 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 1611.519461][ T9265] ==================================================================
[ 1611.527592][ T9265] BUG: KCSAN: data-race in n_tty_write / tty_set_termios
[ 1611.534602][ T9265] 
[ 1611.536920][ T9265] write to 0xffff88814afd011c of 4 bytes by task 9269 on cpu 1:
[ 1611.544526][ T9265]  tty_set_termios+0x1c2/0x8a0
[ 1611.549291][ T9265]  set_termios+0x375/0x3b0
[ 1611.553695][ T9265]  tty_mode_ioctl+0x573/0x670
[ 1611.558369][ T9265]  n_tty_ioctl_helper+0x8b/0x4c0
[ 1611.563395][ T9265]  n_tty_ioctl+0x102/0x200
[ 1611.567879][ T9265]  tty_ioctl+0xa8f/0x1120
[ 1611.572282][ T9265]  __se_sys_ioctl+0xcb/0x140
[ 1611.577412][ T9265]  __x64_sys_ioctl+0x3f/0x50
[ 1611.582171][ T9265]  do_syscall_64+0x3d/0x90
[ 1611.586582][ T9265]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1611.592502][ T9265] 
[ 1611.594818][ T9265] read to 0xffff88814afd011c of 4 bytes by task 9265 on cpu 0:
[ 1611.602342][ T9265]  n_tty_write+0x86/0xaf0
[ 1611.607697][ T9265]  file_tty_write+0x409/0x660
[ 1611.612368][ T9265]  tty_write+0x24/0x30
[ 1611.616424][ T9265]  vfs_write+0x69d/0x770
[ 1611.620676][ T9265]  ksys_write+0xce/0x180
[ 1611.625010][ T9265]  __x64_sys_write+0x3e/0x50
[ 1611.629602][ T9265]  do_syscall_64+0x3d/0x90
[ 1611.634015][ T9265]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1611.639996][ T9265] 
[ 1611.642302][ T9265] value changed: 0x00000000 -> 0x0000003f
[ 1611.648097][ T9265] 
[ 1611.650602][ T9265] Reported by Kernel Concurrency Sanitizer on:
[ 1611.656755][ T9265] CPU: 0 PID: 9265 Comm: syz-executor.4 Tainted: G        W         5.13.0-syzkaller #0
03:39:04 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0)
read(r2, &(0x7f0000001180)=""/192, 0xc0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x34000, 0x0)
r4 = open(&(0x7f0000001240)='./file0\x00', 0x210200, 0x100)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4)
write(r2, &(0x7f0000000180)="977076a59b3bf3830bd1b16260f0d5ca06a31b8e3f9a8a1e3c35f2b1ef76b6dd3787e77dfe7161ef456fb42ec8751a18dd3027a74cd16098243d41c57bfa00b5ad130812fdeefcef12fb59db448dba469a79bf454cd6a18844c2afdfebee19aa8e17d2865d63669405d35dbd478c4455296691f9d38c9913ea6db65ef34a88a8d5c6265b1b01ea22298e4c775818dc214cd8aedd7dbf616afa31134043427f943399b0992f9f24c28aef6678098b096434b5bc62f2ef6611c5a0b79deddb4a300f558b330b98f29a04abd5eaecbfdb9d80efd712a917ae6f5f086f5d899c0c255e0776ae158c5085ca39b69cd1cc869501b6ecfff64b7de7113f4b857dc1c77b0ff4527c9bb6222884ad1d56893b7f77bcbc28d3b3973950cc97e2ea94a2c3d5dc4b51e346f4b80274139a457b0e31c4f2a9e47fda195e22e3ab57ecc6eef5f63715a9171c7a2b8cc8c942129341aa446fa733ab3021200d44419f462d0f43cefff7d27a46d9ff8728cb8aa1d42b8266b91a0240725334c0b8146e90e276437dbea073e8aafe14661711d0c759c5b85eeff39aff5a9dd4d04006b429863d17b556b14abc6570ad36c06a53f8ab01a4dbabb9134624ab61b0572205dd327c2ced73e4e7697d8222da4c9bc663ff01e2914155efa86834d820c913b00e72deedfc081970c46ab92264863879808569be171744fe037de1c6add60ff552fbde4509e12b34c6ea0876ffc4c79b535eaf7632513d62577dd529a51741b3b9e248667e88bd5d4f544ac4805c420698e86c3a7dc4d6cf573d46ca9348b00412e762a48fa739c4ad20469cc3911f24514ad7c24231e45f339b397622ab2643a342698b41b5e64dcee723a42cdff5a3003702da49711a851114d0f73bbc1b7d79178b08baeea19700b2d4437a306c423606fd8f20ade548bfba0b9739a458d74bc15a7b6571f80698ed578ce7cc99e1f9b74083b22f15f6979206f9f2f970493ee7c5ab33f27e4071a98b3f6684b4e04c6a77d2555304ddbbf616960d4703f9baae88aab85868b10aa9535701ae158b09274eff3ad4b6f6ed83cb241d969979bdc305fdf1b0c8dd2da3a2a4519c3d88fedd04427abe9e8e27b5501a3ba07c64892ea9e08587dc716df06f6f2e51ed2b9f79bee6e66d60d0076703b92389cba08f34f59198853b85e4e38ecb95ccff4dd5de6ef7a6469339bbf89e2eae02dca4a2131152d1368361fae9be61facfc97ccddec2e048feddba0066217471c3c1e038a2fbd8b795c3fecc06cdd26c4f5660f8874950fb63d220721910f6262688580925fbf4c73557fd653ae5975f02e76b6a8d6c9eeb0da5a336b90e65d0286ce00f09fa0f83a9018f3c70928e21bd83121e6a6a2c644df5beb2c5de4cf87bf245c3c3adf490f6c7ed88ba0a7dad1e18ca538066e69aacf3670ba77d249808623f11463e0456eb1e735c5e3102e488e99224be68e0a9abc40e02d80452fb73a21bbb7b09f1b65ea6080ba9d82a66d666e0648b113b22db7784daa2c88f394102fc9e7e67baeeffdd243ac189683f5c024c26f9f20ca8dc833e02c5aa3ba2a5c25148b42477d9d17b5a23c36f9ef2759e3003528944a40f99dbdecf1364793b83835f15444069055c2d0f4b2aa1d0b4c95ac9a4dd789d8d641a3b12d0601b1c5468485b2cd9f734287f41b9b6d387454adaa3e0e73e25ab958a989eb0084385468aaed319ad53d25b748b5a5e3a44c6cb6d1812e344809d2f13a40d67ce4a3c3bfd2aaa73241a05e5f5718708597d64be284cc052cda2763f86a79351442206f5638badfbcc5892b38c55633464f131ea5bf752c9f0336ce2b606625723fb55d22879e96a9bd328eb35b88d186bd6af53ef85324d5f45ba3c61fe2240e57269d0208fed35c9938a8c812e2df9c93e4fcc0b23ec7da18ea5f5cba806e5a7fed9d5bf0f2bf6e4bd71bab1e1a469fbd8df2dc12f4df69e357760a21073deab3e6fda285eac320fcb808007cb4e3f41b5666723fc1dfb2aadc9d5639412044e2a9c54598ebf3575fdd81349fdc9de652d1a6a2947b653d21f8b6ee378dfe764d664e9ededb433b974a90d8f745600abd80c02136970b461ac318c5cdaaccfd0fe06a7041013eb9ad9439cfb1971dfd31da19d338473fb6e88ed26580f817d2e7f05bcc74d47b41903f973a4c18d2bb1460a7160f1f84ce7dafd36e94563c8048d5d12f964f2614d9a34fb1e2698f178e17f68f092e315cee9c9e69efa96d911e7c8f517b23227dd560ca7c41c099fed048a3424a1f6d4cf7687f19729ab5291d1a18ede5261f0d48dad19522ad909ca2fe76bfa7e770ca090817fbc8ae6f7656e7afae93c383fadfddb7f6c4ce89e4582a44f3fb36fe754ea42055aa993dd7883b76205a163d7ea2a8bee10241e7a44ab2de87a5281cbde528117150ea705810af06cb3dd6c2d2ca49ae591a7e87ddad97594ec3f76f9d7c80e84eb5e87ba79e75b906129adb01e66085f9ca7054ea084c76070a8ed8c88283e5ed70ee9d2faf0720ae58eb04cf3a3b06d6812c5550573cadf60a83585dac598840b4271966f378c941f340aa5a0b93671c144a49e0ccb59ca2b0c4836e2eac947a02b8e663bb51c7c929b050830d4cfbe582503ef5675a5f141d70500c95395934f586d4dc1f3f9eec0d29cc22c61291346fb5d1043c3bbfd86301c5223406f631fb481fc0420010fe5e3e813e0c87bb63749a352ce15c269801b8a978467393d7e8e8ccd10af53c5de2ce9397bde77c43388a35d1cc74fc385f21e056690205796160ac6781d81ecf8a64966894f0d32f9ba78a2dd6138b19b00d40a63a4043cf5058693bc49b49ef3997186c558481550399dc970df4e7e8c7f24d85ee73c6bf4aeac54793dd921ef2fdd638a613b875ba1ed4f00155b9b519ce1836c7e1194e648f9292c695db7cc15dceefa83d228f962421c6e7c39a0fd8fe86c52d246924c6e14749c13725dda3ef7e3102687c460110b6284dd524f01069774901dfb28cdd9a3326f5c326c3f898c1f04c3c73954dd841f93cb655ae0b81e839d2a971359a9c3629ea0d6b562789269ec583c8e89b8a6fadd8488f2a1c9f8b7fca9af1ab1cd23b439970ad91cb34368ee910ffe59872d79d19be37767d401b8b003cf0feedfda342ebd562e15e7e3f39213a972816f1fd4f55f887b6a6fb2e9f60acec9bcdfb2de11575c21eed43f81083e247088dea3cb166099f3516381c571075da2bee317164c2741541fef570f02e9d64c901228f0ffa626537371fbbcb50b79519603a66e59f0820e79bdca0e270764a33ccec6d403a1fe4af6430eb3b60808be86811dbb04ca0c9bc9ab3f06d25a31e23951bcb4f86373e305c8ca800c4f845fd349e40652f6e738deb2538a18418b633a932fa8a6393b9215750f66e59d48d37cc673f4562060848eeb5ebe3dd39c5958fd47d02ef76b01c2abaf7554b59fdcba181fe1aff9001a8ea7d1298bcc680740b4bd7a29de884cb121b30dbc83245e57c7d5ef6dcb89a44903972e1ada17160a4cf01df8eabbdc5f313907330277c827036b24f4f76f6e5e538293b172c105135f3180f3d4c0dc3d786cc4e9427ba3fe15acb47b692678203a9cfca4e8cc912b614133dd9ceac6473ef5bd9f23416c629ad8a10d81931efabcd7840bc23d720c0fa583cf92a21e0f4ec82db32c445aa8c262821eb740f2e368cad30bfe1d58f7244a8d9a5249991aee839dee0ec62591e5a635f2d2856313e32b54e248d6df00c098e41cad9239d5c035bf092ad671ab34bd5b1203f008a7f1630aeab8c54135bee3e17090c05e147757b0918365e8c76c72e4e3a054463fb98ebf9bdb7a00eec57aa3bf02490121251c624686f436e1e3e62cd65b4bc8d63d41b8d183bd783bdbe669bbd226695c68873558b1ed71c0cdae8ebece9f1d54f29a255f6f900180cdfd49a87cea1137570a7f3c618c72d336136b17feaedd8f81e15a55f841d52a2c8e7e4f5fe08d4c22f34d0074f7ba7005966ff133ca00ae2a3287d14895c3db826ece0196fcfe8eaca6cd8fd98cfa51bfedb7db2cb490f24fd0d16cd79dcd384b8e79e3b7ab9155642e3bdb69a1dc3c0f3a97b5dca7698971fd8587c45a5638b9d6a6dc1825f8d40f9fe1605b996de2a72ff2d59ebc0cf79fcf5dc76ecd12407108c0fd104de74cb6a51913f2764cc2537ae7ab7d2b8a0a547d2a0ac2669f3a84216b475784590e0a3a9b0e1f3a4e4ad2cbcc9aa63b28b474b034a3d2ea2fc9108b8c6612ee613de6a326561956393faecf3c891b57b454ba27c408f40b466e089edd8529d061c80467eedbff4c4a199fafad43a89778b90880954ca468cc2791b03d49a04b5fff438e9dde7a57989c001bfc49d8032a91e4500d27178a010761228e5aac102a31e732658a4810bdc747a663c570045b51113f583f50df9f5a833fe08b9c08f1095f13ba14e77a9ce2e4000ae20a2fccccf161d223a8facc3d7d431833a0a3efa77e2f9da9c930bdf0115be4276f3720b5ab94aaa49ecda67c882bff8577bccb5bc0cc828a0bc875d5a3f427783d02304f1689b018314a6e700de0153af41646788df26c39d0e8f785e0ba133dccba973c3a5f1ce3e5ff3a0ee3b6e77a2ddf10e9e934b95e7a449663866c9d90571a9652a1f18ede1b5a8cf8229040cd4a7a6c2bac6bb8486eddd2b2e1ec827eda6f101b57c402c956ff3a1093436eb08daab89ed56ac71c41da49b00ebe87999569219c40fc5f209bf393738269d6cf6f4260921919a8bf15884bcfb5f0e05dfaca651ccc0d91d51a49918ac5914edfb0823cb35b917cb9ccc3b3d66eee57df3a799872eab969b355bca5c871624f69c3987ceec03e61461b636bd2d4ed344cfea0511ada0600e53e8d0c3f5fdf5c7a236ec5cc5b78238430981f656a40062b3908af1a2c91385a27d801c1641cd7de24cf57957e52641aba0d877daba496f1e15d9fb876137931932720b15b86962c63c58fa6dc1bbf777d53e2e23ed68c86363ad6b0b847fb272c8c84086c4769aedd3e674cf7bb048055681ddf72093cbdf8d584c0a9d6767aae0e1757d44c34da02337e1a56f2d32203a44a0cdc60de14ecb55e2d4e0a0e9a0770a45a3b9b249987f6a7084067527977d4324243bff3f22624971bbade229dca5bf7536e93750a2d5b926983bae990216562303a73d4f777283b4434f1dd212199ea4487ab38f82a9978dc018797e30aed58a5e46dac286dee29613ecd6679d11d6acdf46247e15c28d2384c3f9048f6fb5454e5c2a5cd7f7fbfd60cb3b87463d0f2a2a54bcca3342a110e2ee6a520d5c3bae6c16effe10ef09c49f650750c15874a04c0c3d73695d1051ee713bc43625117310c3fae0663837b3a3a86bf5e4524cf6a0d3d5b03430296977d3ad106f0a16228fc93bfa7b10e8e7ed5a8d335cbc3d82ac0884331d43f4d11b2160f4762a594f811e88901949a70b87a72d6b8213eb32dc3c4da0cf4fc9f4861086988de9dd42ac6d92b7bb41e4948f9ce466ed303cd54d2838c3e6d924f43867226917a9d0ed83ff011507a3d77e92d85843f905c75f574a82362a230c610affc0e1ffb6b49f9020e44ce614b36b9d861a833d69e61db0fbb3c1c6bcd80437be78c7b011cec20bdd5c041abc2449e46dd15aa92878619e534a2554fbc321b67896c843716a66191fd2a061ccd9dfcc89799fbdd7a8c2b4811d7c3798bdf5c885897916f80591ef2f510d6d7e6ebdf24e7f8fbd06e90771169bad2742850d6b35e0af0f6648a3aab1469940bf31dc328b595f8de", 0x1000)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f0000000000)=0x13)

[ 1611.667615][ T9265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1611.677835][ T9265] ==================================================================
03:39:04 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, 0x0, 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:04 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00", 0x0, 0x2})
ioctl$TCXONC(r0, 0x540a, 0x2)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:04 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:04 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:04 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:39:04 executing program 0:
msgsnd(0x0, &(0x7f0000000200)={0x3, 'C'}, 0x9, 0x0)
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
r1 = semget$private(0x0, 0x4, 0x610)
semtimedop(r0, &(0x7f0000000100)=[{0x1, 0xe111, 0x1800}, {0x0, 0x3, 0x800}], 0x2, &(0x7f0000000140)={0x0, 0x989680})
semtimedop(r1, &(0x7f0000000040)=[{0x6cb82813199d5827, 0x5d, 0x1400}, {0x3, 0xfff, 0x800}, {0x1, 0x3, 0x1800}, {0x3, 0x4, 0x1000}, {0x3, 0x0, 0x1000}, {0x0, 0x3, 0xa0f4b33a541893a1}], 0x6, &(0x7f00000000c0))
semget$private(0x0, 0x4, 0x0)
semtimedop(r1, &(0x7f0000000180)=[{0x1, 0x0, 0x800}, {0x4, 0x40, 0x1000}, {0x2, 0xffff, 0x800}, {0x0, 0x0, 0x1000}, {0x0, 0xff}], 0x5, &(0x7f00000001c0)={0x0, 0x989680})
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:39:04 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
r1 = semget$private(0x0, 0x8, 0x0)
r2 = semget$private(0x0, 0x8, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf002}, {0x1, 0x0, 0x1800}], 0x3)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x10)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140))
r3 = semget$private(0x0, 0x4, 0x408)
semctl$SEM_STAT(r3, 0x0, 0x12, &(0x7f0000000200)=""/174)
semtimedop(r1, &(0x7f00000000c0)=[{0x2, 0x6, 0x800}, {0x5, 0x1}], 0x2, &(0x7f0000000100)={0x77359400})
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semop(0x0, &(0x7f00000002c0)=[{0x0, 0x2, 0x800}, {0x0, 0x2, 0x1800}, {0x2, 0x2, 0x800}, {0x1, 0xffff, 0xc00}, {0x1, 0x25}, {0x2, 0x3, 0x800}, {0x1, 0x1, 0x1800}, {0x3, 0x5}], 0x8)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080))
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semctl$GETPID(0x0, 0x4, 0xb, &(0x7f0000000140)=""/137)
semop(r0, &(0x7f0000000040)=[{0x4}, {0x3, 0x80, 0x800}, {0x0, 0x8, 0x1800}, {0x1, 0x5, 0x800}, {0x3, 0x7cc, 0x1800}, {0x3, 0x8, 0x800}], 0x6)
semop(r1, &(0x7f0000000000)=[{0x4, 0xfbbc}, {0x1, 0x20, 0x800}, {0x2, 0xf801, 0x1800}], 0x3)

03:39:05 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:05 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:05 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:05 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x200, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc)
sendfile(r1, r2, 0x0, 0x6)
r3 = dup(r0)
syz_open_pts(r3, 0x8402)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f0000000000)=0x13)

[ 1612.439319][ T9314] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1612.447835][ T9314] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:39:05 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:05 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:05 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:05 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:05 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:05 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1613.087334][ T9367] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1613.096164][ T9367] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:39:05 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000), 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:39:05 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040), 0x2bf9)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:39:05 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:05 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x0, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:06 executing program 4:
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040)={0x77359400}, 0x10)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001df353c82000000000000050ddff00", 0x0, 0x9})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/187})

03:39:06 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:06 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x0, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:06 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
r1 = semget$private(0x0, 0x3, 0x238)
semop(r1, &(0x7f0000000000)=[{0x2, 0x7, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
semop(r1, &(0x7f0000000080)=[{0x0, 0x5, 0x1800}, {0x0, 0x40}, {0x4, 0x5, 0x1800}, {0x1, 0x5}, {0x3, 0x5}, {0x2, 0x5966, 0x1800}, {0x0, 0x8, 0x1800}], 0x7)

03:39:06 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:06 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x4010, r1, 0x2ed1b000)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000180)={0x2, 0x11bf, 0x4, 0x3ff, 0x4, [{0x7, 0x0, 0x1ff, '\x00', 0x48a}, {0x0, 0xcf3, 0x7fff, '\x00', 0x88}, {0x80, 0x0, 0x100000001}, {0x6, 0x1, 0x8, '\x00', 0x1808}]})
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000000)=0x13)

03:39:06 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
r1 = semget$private(0x0, 0x4, 0x43)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}]}]}, 0x94}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x170, 0x0, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_MASTER={0x50, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x11}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2adfe5e8}]}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x579f}, @CTA_TUPLE_ORIG={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}]}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x240c}]}, 0x170}}, 0x4010000)
semtimedop(r1, &(0x7f0000000380)=[{0x2, 0x1, 0x1800}], 0x1, &(0x7f00000003c0)={0x0, 0x3938700})
socket$nl_netfilter(0x10, 0x3, 0xc)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000640)=[0xcaf1])
r3 = semget(0x0, 0x1, 0x100)
semtimedop(r1, &(0x7f0000000300)=[{0x1, 0x8000, 0x800}, {0x0, 0x20, 0x800}], 0x2, &(0x7f0000000340))
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000000)=[0x81, 0x400, 0x1, 0x972a, 0x0])
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
semget(0x0, 0x1, 0x0)
write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc)
sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0xe, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x20004000)
semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0)
semtimedop(0xffffffffffffffff, &(0x7f0000000080)=[{0x3, 0x8}], 0x1, &(0x7f00000001c0)={0x0, 0x989680})

03:39:06 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:39:06 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x0, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:06 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:06 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
r1 = semget$private(0x0, 0x4, 0x102)
semop(r1, &(0x7f00000000c0)=[{0x0, 0x6, 0x800}, {0x3, 0x3, 0x1000}, {0x3, 0x100, 0x1000}, {0x4, 0xffff, 0x1000}, {0x3, 0x6, 0x800}], 0x5)
r2 = semget(0x2, 0x3, 0x681)
r3 = semget$private(0x0, 0x8, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r3, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r3, 0x0, 0x10)
clock_gettime(0x0, &(0x7f0000000180)={<r4=>0x0, <r5=>0x0})
semtimedop(r3, &(0x7f0000000140)=[{0x3, 0x1995, 0x800}, {0x2, 0x81}, {0x4, 0x4, 0x800}], 0x3, &(0x7f00000001c0)={r4, r5+10000000})
semop(r2, &(0x7f0000000100)=[{0x1, 0x2, 0x800}, {0x4, 0x9b78}, {0x0, 0x2, 0x800}, {0x2, 0x1, 0x1400}, {0x2, 0x5, 0x800}, {0x3, 0x4, 0x1000}], 0x6)
semget$private(0x0, 0x0, 0x133)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semtimedop(0x0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x10)
semtimedop(0x0, &(0x7f0000000200)=[{0x2, 0x7ff, 0x1000}, {0x4, 0x3}, {0x1, 0x0, 0x1000}, {0x1, 0x0, 0x800}, {0x4, 0xbdb, 0x800}, {0x3, 0x6, 0x1000}, {0x0, 0x8, 0x800}, {0x4, 0x3, 0x800}], 0x8, &(0x7f0000000240)={0x77359400})
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xffff, 0x1000}, {0x4, 0xd51c, 0x1800}, {0x1, 0xfffc, 0x1800}, {0x4, 0x9}], 0x4, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:39:06 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000040)={0x0, 0x8})
write(r0, &(0x7f0000000240)="1d3a044a7e5f899379f7f8132af7c0e5133ac71d84d9f9dfaa6e2d2ec2d4bc6c3a98cc3d2abe52e670779d07f673c8096093574a46fce711f75b70d2d44d32005554b3a8d12918d3c2bf3063f0c8095d6127ab9686220fc3bee3cb8d806d8dee7b2b73aae044e2223c17c0aed4400b8fdc68e251fa2e323866e6ef2adb72e331cd234c2d4e4ffbf9528bd7f2a63665", 0x8f)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xff)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:06 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:06 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x1ff, 0x0, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

[ 1613.822793][ T9430] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1613.831254][ T9430] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:39:06 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:06 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4800)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000000)=0x13)

03:39:06 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x1ff, 0x0, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:06 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:07 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
semop(r0, &(0x7f0000000080)=[{0x3, 0xd9, 0x1800}, {0x0, 0x19ca, 0x1800}, {0x0, 0x0, 0x1800}, {0x4, 0x17a, 0x1000}], 0x4)
semctl$IPC_INFO(r0, 0x2, 0x3, &(0x7f0000000000)=""/44)

03:39:07 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x1ff, 0x0, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:07 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:07 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f0000000040)=[{0x3, 0x3, 0x800}, {0x0, 0x9, 0x1000}], 0x2)
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:39:07 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000000)=0x13)
ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040))

03:39:07 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:39:07 executing program 2:
r0 = semget$private(0x0, 0x0, 0x580)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
r1 = semget$private(0x0, 0x2, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x0, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semctl$IPC_RMID(r1, 0x0, 0x0)

03:39:07 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:07 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, 0x0, 0x0, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:07 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13)

03:39:07 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
r1 = semget$private(0x0, 0x8, 0x0)
r2 = semget$private(0x0, 0x8, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x10)
semop(r2, &(0x7f0000000180)=[{0x0, 0x7, 0x1800}, {0x2, 0x8000}, {0x0, 0x7}, {0x4, 0x8000, 0x325c0f28ea5c8c82}], 0x4)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000080)=""/190)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

[ 1614.701543][ T9494] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1614.709996][ T9494] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:39:07 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, 0x0, 0x0, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:07 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13)

03:39:07 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, 0x0, 0x0, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:07 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:08 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:08 executing program 0:
r0 = semget$private(0x0, 0x8, 0x4)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:39:08 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13)

03:39:08 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:39:08 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x1)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r2 = syz_open_pts(r1, 0x20000)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040))
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:08 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:08 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, 0x0)

03:39:08 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00", 0x0, 0x8})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000000)=0x13)

03:39:08 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1, 0x6256}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semtimedop(r1, &(0x7f0000000000)=[{0x1, 0x2, 0x800}, {0x1, 0x5, 0x800}, {0x4, 0x1, 0x1800}, {0x3, 0x4, 0x800}, {0x3, 0x3}, {0x0, 0x3, 0x3000}, {0x4, 0x40}, {0x1, 0x1, 0x1800}, {0x1, 0xf7ff, 0x3800}], 0x9, &(0x7f0000000080)={0x0, 0x989680})
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

[ 1615.695090][ T9553] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1615.703678][ T9553] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:39:08 executing program 3:
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r0, &(0x7f0000000b40)=ANY=[], 0xa)
close(r1)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r0, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x80000001, 0x0)

03:39:08 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r2 = epoll_create1(0x0)
splice(r2, &(0x7f0000000040)=0xc7d8, 0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffff001, 0x40, 0x2)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:08 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, 0x0)

03:39:08 executing program 3:
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r0, &(0x7f0000000b40)=ANY=[], 0xa)
close(r1)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r0, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x80000001, 0x0)

03:39:09 executing program 0:
r0 = semget$private(0x0, 0x8, 0x200)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semop(r0, &(0x7f0000000040)=[{0x4, 0x8000, 0x1000}, {0x5, 0x20, 0x1800}, {0x1, 0x0, 0x1800}], 0x3)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:39:09 executing program 3:
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r0, &(0x7f0000000b40)=ANY=[], 0xa)
close(r1)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r0, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x80000001, 0x0)

03:39:09 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, 0x0)

03:39:09 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:09 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:39:09 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0)

03:39:09 executing program 5:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 1616.540870][ T9613] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1616.549410][ T9613] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:39:09 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
semctl$IPC_RMID(r0, 0x0, 0x0)

03:39:09 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)={{r0}, 0x3f, 0x3ff, 0x9})
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000100)={0x8001, 0x1})

03:39:09 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0)

03:39:09 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:09 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0)

03:39:10 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semtimedop(r0, &(0x7f0000000040)=[{0x1, 0x100, 0x800}, {0x2, 0x365, 0x1000}], 0x2, &(0x7f00000000c0))
r1 = semget(0x0, 0x3, 0xe1)
semop(r1, &(0x7f0000000100)=[{0x3, 0x100, 0x3800}, {0x2}, {0x3, 0x6, 0x800}], 0x3)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:39:10 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$GETVAL(r0, 0x1, 0xc, &(0x7f0000000080)=""/179)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

03:39:10 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)

03:39:10 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x9d2bd25c3f13b97a, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000180)="508f9390953d14e7c1b7f70fa451b0e0f421b8bd02b6f938018771da30b62b3a76d3158ff982032710665bbd1aa1b465f1c119dc06aed64ec388adbc4e92e4dd35a9fc59fea432af89020348e7f1548f14eee925250b1a699006aa1a982cf02aa0047f97e929ca0c5737a91440e9bb147e93")
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x3, 0x101, 0x200, 0x7, 0x14, "e58ed0d9678918501fcb357a1be2376bfe15cf"})

03:39:10 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x6, 0x8001, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)
syz_open_dev$tty20(0xc, 0x4, 0x1)
syz_open_pts(r0, 0x18000)

03:39:10 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:39:10 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)

03:39:10 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0x78)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x4, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000180)="8d0f8979932250b227163c34b5cf896bcc874edea9521087a0b8a52808f2a7a33defc2c4218568020107f1758c5ca17956b9b3246d6b55f6513a29779db154d2e68b758b2930eba6c0b492aa0e68b1f931fc57985ece9b042f7fe610e4c27ef02f2da974c53988b169044b02f7e78a5b4874f79c")
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r4 = accept(r3, 0x0, &(0x7f0000000200))
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000280)=0x14)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0xc7)
r5 = fcntl$dupfd(r2, 0x406, r1)
ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000100)={0x2, 0x6, 0x8, 0x9, 0x1, "6c84f0b7ac03c976e7160e2c48e7f74d12691d"})
ioctl$TCXONC(r0, 0x540a, 0x2)

03:39:10 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x0, 0xf000}, {0x1, 0x101, 0x3000}], 0x3)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(0x0, &(0x7f0000000040), 0x0, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x10)
semop(0x0, &(0x7f0000000140)=[{0x2, 0x9, 0x1800}, {0x2, 0xd13c, 0x1000}, {0x0, 0x344, 0x336a584f5e142250}], 0x3)
semop(r1, &(0x7f0000000000)=[{0x0, 0x4, 0x6ab7bd2b6d9b9761}, {0x1, 0x8}, {0x4, 0x5, 0x1400}, {0x3, 0x20, 0x1800}, {0x0, 0x3ff, 0x1000}, {0x0, 0x2d8a, 0x1000}], 0x6)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
r2 = semget$private(0x0, 0x8, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x10)
semctl$GETNCNT(r2, 0x2, 0xe, &(0x7f00000000c0)=""/123)

03:39:10 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = fsmount(0xffffffffffffffff, 0x1, 0x10)
write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="73797a310a8502bc0b5d4fc274b8b82cad66069b4a17ba771949910a18699fd0b7f1ae432c7c3a09be16ddacc92d8bba57dfba454e297cfcf3c13dd50c2ddf53d0ae5aab1d7fc3495a69e8c722607073079a4711668671ad72097df8447debb8a6a9bd598725389c74ab47d66ddfdcd3bf93995d3d9c0d49f10e96fce7c9c3652f7e7ba64383beaa3f543c48c1e10300d463a3dfeee0eb7432125f240aba91311db15967df270b58687d07dd32dcad03218a57fecb356a3667fa7ddd51727ae015e776d3b4000000000000000000"], 0xce)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x3, 0x8, 0x8, 0x1, 0x1, "1b67b2004d234109be8b222cfdc70913389101", 0x4, 0x8004})

[ 1617.517071][ T9678] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1617.525439][ T9678] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:39:10 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)

03:39:10 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x20000, 0x0, "00000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x4a0400, 0x0)
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000004c0)={0x800, 0x87, 0x6, 0x6, 0x2, [{0x6, 0x8, 0x11b, '\x00', 0x82}, {0x8, 0x100, 0x35, '\x00', 0x1}]})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)
write(r0, &(0x7f0000000180)="cd4aae6e3bd6133e5bb450f08b5ec1ca6a5c4b0e781982c9650e5658123f83c99a83b916baff6747c36d0321e69412d209bffa6f197e51795d5dca42abc806edb06d9ec37bf48148ec285886b4aad2365c40e5425dfe91d75f8637bfc7bcb426da383a6551a507f66e524d8cb0f52c3ecace8b1d68d564d84dd86c8b95bb90cb7c9f449ae9a9017ac5ac62361acadc13e29e926b83e8548d0a695608c278f8d90c113567b09a933d4c195c9cdc77f89f1b443af33f52fbb616d1ec292e339c7a3ea0296d67fcb85a68372c78369399515df93b397904741f8ce9a21fba111ffb2593a02f0a4c531bde2912aa44d8d626527a2d3520fa947d", 0xf8)
ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000280)={0x2e, "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"})

03:39:10 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
r1 = semget(0x3, 0x1, 0x100)
semop(r1, &(0x7f0000000000)=[{0x2, 0x3}, {0x2, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:39:10 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x998, 0x1, 0xcd26, 0x7f, 0x4, "caf3973d8d31c0a94cb1d4234737d525833159", 0x5, 0x2})
syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:10 executing program 5 (fault-call:12 fault-nth:0):
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:10 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1618.277734][ T9722] FAULT_INJECTION: forcing a failure.
[ 1618.277734][ T9722] name failslab, interval 1, probability 0, space 0, times 0
[ 1618.290379][ T9722] CPU: 1 PID: 9722 Comm: syz-executor.5 Tainted: G        W         5.13.0-syzkaller #0
[ 1618.300193][ T9722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1618.310452][ T9722] Call Trace:
[ 1618.313725][ T9722]  dump_stack_lvl+0xb7/0x103
[ 1618.318313][ T9722]  dump_stack+0x11/0x1a
[ 1618.322500][ T9722]  should_fail+0x23c/0x250
[ 1618.326999][ T9722]  __should_failslab+0x81/0x90
[ 1618.331758][ T9722]  should_failslab+0x5/0x20
[ 1618.336333][ T9722]  kmem_cache_alloc_node_trace+0x58/0x2e0
[ 1618.336363][ T9722]  ? __get_vm_area_node+0x11b/0x260
[ 1618.336420][ T9722]  ? local_bh_enable+0x1b/0x20
[ 1618.336443][ T9722]  ? lock_sock_nested+0x128/0x160
[ 1618.336530][ T9722]  __get_vm_area_node+0x11b/0x260
[ 1618.336566][ T9722]  __vmalloc_node_range+0xb7/0x5a0
[ 1618.336585][ T9722]  ? netlink_sendmsg+0x425/0x7c0
[ 1618.336654][ T9722]  ? rht_key_hashfn+0x60/0x60
[ 1618.336669][ T9722]  ? netlink_hash+0x90/0x90
[ 1618.336685][ T9722]  ? netlink_sendmsg+0x425/0x7c0
[ 1618.336747][ T9722]  vmalloc+0x5a/0x70
[ 1618.336757][ T9722]  ? netlink_sendmsg+0x425/0x7c0
[ 1618.336773][ T9722]  netlink_sendmsg+0x425/0x7c0
[ 1618.336790][ T9722]  ? netlink_getsockopt+0x720/0x720
[ 1618.336882][ T9722]  kernel_sendmsg+0x97/0xd0
[ 1618.336895][ T9722]  sock_no_sendpage+0x84/0xb0
[ 1618.336923][ T9722]  ? __receive_sock+0x20/0x20
03:39:11 executing program 5 (fault-call:12 fault-nth:1):
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:11 executing program 0:
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000000c0)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r0=>0x0}], 0x5, "b546a7b596bd07"})
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000010c0)={r0, 0x3ff})
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000020c0)=[0x1ff, 0x6, 0x8e15, 0x5a6, 0x1, 0x40])
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
r2 = semget$private(0x0, 0x8, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x10)
semop(r2, &(0x7f0000000040)=[{0x0, 0x401, 0x1800}, {0x4, 0x5, 0x1800}, {0x3, 0x0, 0x800}, {0x2, 0x4, 0xef7c7c4ce2b486a7}, {0x3, 0x0, 0x400}, {0x3, 0xff}, {0x1, 0x101, 0x1800}, {0x2, 0xff80, 0x800}, {0x4a51cc093e429498, 0x5, 0x1000}], 0x9)
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
r3 = semget(0x1, 0x0, 0x0)
semop(r3, &(0x7f0000002100)=[{0x3, 0x3f, 0x800}], 0x1)

[ 1618.336943][ T9722]  kernel_sendpage+0x187/0x200
[ 1618.337034][ T9722]  ? __receive_sock+0x20/0x20
[ 1618.337051][ T9722]  sock_sendpage+0x5a/0x70
[ 1618.337065][ T9722]  pipe_to_sendpage+0x128/0x160
[ 1618.337084][ T9722]  ? sock_fasync+0xc0/0xc0
[ 1618.337101][ T9722]  __splice_from_pipe+0x207/0x500
[ 1618.337145][ T9722]  ? generic_splice_sendpage+0xb0/0xb0
[ 1618.337165][ T9722]  generic_splice_sendpage+0x80/0xb0
[ 1618.337181][ T9722]  ? iter_file_splice_write+0x750/0x750
[ 1618.337272][ T9722]  do_splice+0x9aa/0xd30
[ 1618.337292][ T9722]  ? vfs_write+0x50c/0x770
03:39:11 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$IPC_RMID(r0, 0x0, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
r1 = semget(0x3, 0x3, 0x40e)
semop(r1, &(0x7f0000000000)=[{0x1, 0x189, 0x800}, {0x4, 0x2}], 0x2)
r2 = semget$private(0x0, 0x8, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
semctl$GETVAL(r1, 0x4, 0xc, &(0x7f0000000280)=""/132)
semctl$IPC_RMID(r2, 0x0, 0x10)
clock_gettime(0x0, &(0x7f00000000c0)={<r3=>0x0, <r4=>0x0})
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(0x0, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x10)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)=[0xdfd, 0x8, 0x2f, 0x9, 0x6, 0x7f])
r5 = semget(0x3, 0x2, 0x428)
semtimedop(r5, &(0x7f00000001c0)=[{0x3, 0x80, 0x1800}, {0x0, 0x596e, 0x1000}, {0x1, 0x5, 0x800}, {0x3, 0xfe00, 0x1400}], 0x4, &(0x7f0000000200))
semtimedop(r2, &(0x7f0000000080)=[{0x1, 0x7}, {0x0, 0x825, 0x800}, {0x2, 0x1000, 0x1000}], 0x3, &(0x7f0000000100)={r3, r4+60000000})

[ 1618.337307][ T9722]  ? __fget_light+0x21b/0x260
[ 1618.337324][ T9722]  __se_sys_splice+0x2a6/0x390
[ 1618.337375][ T9722]  __x64_sys_splice+0x74/0x80
[ 1618.337394][ T9722]  do_syscall_64+0x3d/0x90
[ 1618.337483][ T9722]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1618.337508][ T9722] RIP: 0033:0x4665d9
[ 1618.337519][ T9722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1618.337533][ T9722] RSP: 002b:00007fa1ed648188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[ 1618.337548][ T9722] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[ 1618.337559][ T9722] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003
[ 1618.337571][ T9722] RBP: 00007fa1ed6481d0 R08: 0000000080000001 R09: 0000000000000000
[ 1618.337583][ T9722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1618.337592][ T9722] R13: 00007ffcc875d14f R14: 00007fa1ed648300 R15: 0000000000022000
[ 1618.337697][ T9722] warn_alloc: 1 callbacks suppressed
[ 1618.337707][ T9722] syz-executor.5: vmalloc error: size 4224, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0
[ 1618.337741][ T9722] CPU: 1 PID: 9722 Comm: syz-executor.5 Tainted: G        W         5.13.0-syzkaller #0
[ 1618.337756][ T9722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1618.337765][ T9722] Call Trace:
[ 1618.337769][ T9722]  dump_stack_lvl+0xb7/0x103
[ 1618.337870][ T9722]  dump_stack+0x11/0x1a
[ 1618.337963][ T9722]  warn_alloc+0x105/0x160
[ 1618.337977][ T9722]  ? lock_sock_nested+0x128/0x160
[ 1618.338001][ T9722]  __vmalloc_node_range+0x20f/0x5a0
[ 1618.338099][ T9722]  ? rht_key_hashfn+0x60/0x60
[ 1618.338121][ T9722]  ? netlink_hash+0x90/0x90
[ 1618.338143][ T9722]  ? netlink_sendmsg+0x425/0x7c0
[ 1618.338160][ T9722]  vmalloc+0x5a/0x70
[ 1618.338175][ T9722]  ? netlink_sendmsg+0x425/0x7c0
[ 1618.338258][ T9722]  netlink_sendmsg+0x425/0x7c0
[ 1618.338297][ T9722]  ? netlink_getsockopt+0x720/0x720
[ 1618.338350][ T9722]  kernel_sendmsg+0x97/0xd0
[ 1618.338362][ T9722]  sock_no_sendpage+0x84/0xb0
[ 1618.338493][ T9722]  ? __receive_sock+0x20/0x20
[ 1618.338557][ T9722]  kernel_sendpage+0x187/0x200
[ 1618.338575][ T9722]  ? __receive_sock+0x20/0x20
[ 1618.338596][ T9722]  sock_sendpage+0x5a/0x70
[ 1618.338615][ T9722]  pipe_to_sendpage+0x128/0x160
[ 1618.338718][ T9722]  ? sock_fasync+0xc0/0xc0
[ 1618.338737][ T9722]  __splice_from_pipe+0x207/0x500
[ 1618.338752][ T9722]  ? generic_splice_sendpage+0xb0/0xb0
[ 1618.338770][ T9722]  generic_splice_sendpage+0x80/0xb0
[ 1618.338808][ T9722]  ? iter_file_splice_write+0x750/0x750
[ 1618.338829][ T9722]  do_splice+0x9aa/0xd30
[ 1618.338846][ T9722]  ? vfs_write+0x50c/0x770
[ 1618.338858][ T9722]  ? __fget_light+0x21b/0x260
[ 1618.338917][ T9722]  __se_sys_splice+0x2a6/0x390
[ 1618.338932][ T9722]  __x64_sys_splice+0x74/0x80
[ 1618.338947][ T9722]  do_syscall_64+0x3d/0x90
[ 1618.338964][ T9722]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1618.339054][ T9722] RIP: 0033:0x4665d9
[ 1618.339066][ T9722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1618.339080][ T9722] RSP: 002b:00007fa1ed648188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[ 1618.339092][ T9722] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[ 1618.339104][ T9722] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003
[ 1618.339116][ T9722] RBP: 00007fa1ed6481d0 R08: 0000000080000001 R09: 0000000000000000
[ 1618.339127][ T9722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1618.339139][ T9722] R13: 00007ffcc875d14f R14: 00007fa1ed648300 R15: 0000000000022000
[ 1618.339151][ T9722] Mem-Info:
[ 1618.339186][ T9722] active_anon:1167 inactive_anon:116138 isolated_anon:0
[ 1618.339186][ T9722]  active_file:17017 inactive_file:50565 isolated_file:0
[ 1618.339186][ T9722]  unevictable:1 dirty:172 writeback:0
[ 1618.339186][ T9722]  slab_reclaimable:4920 slab_unreclaimable:13319
[ 1618.339186][ T9722]  mapped:60402 shmem:10128 pagetables:30671 bounce:0
[ 1618.339186][ T9722]  free:1722102 free_pcp:2099 free_cma:0
[ 1618.339226][ T9722] Node 0 active_anon:4668kB inactive_anon:464552kB active_file:68068kB inactive_file:202260kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:241608kB dirty:688kB writeback:0kB shmem:40512kB writeback_tmp:0kB kernel_stack:19360kB pagetables:122684kB all_unreclaimable? no
[ 1618.339263][ T9722] Node 0 DMA free:15360kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1618.339345][ T9722] lowmem_reserve[]: 0 2938 7916 7916
[ 1618.339363][ T9722] Node 0 DMA32 free:3010236kB min:4220kB low:7228kB high:10236kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:3013476kB mlocked:0kB bounce:0kB free_pcp:3240kB local_pcp:3188kB free_cma:0kB
[ 1618.339464][ T9722] lowmem_reserve[]: 0 0 4978 4978
[ 1618.339483][ T9722] Node 0 Normal free:3862812kB min:7152kB low:12248kB high:17344kB reserved_highatomic:0KB active_anon:4668kB inactive_anon:464552kB active_file:68068kB inactive_file:202260kB unevictable:4kB writepending:688kB present:5242880kB managed:5098252kB mlocked:4kB bounce:0kB free_pcp:5148kB local_pcp:2244kB free_cma:0kB
[ 1618.339523][ T9722] lowmem_reserve[]: 0 0 0 0
[ 1618.339610][ T9722] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1618.339694][ T9722] Node 0 DMA32: 5*4kB (M) 1*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 2*1024kB (M) 1*2048kB (M) 733*4096kB (M) = 3010236kB
[ 1618.339857][ T9722] Node 0 Normal: 595*4kB (UME) 640*8kB (UME) 425*16kB (UME) 106*32kB (UME) 102*64kB (UME) 43*128kB (ME) 9*256kB (ME) 14*512kB (UME) 10*1024kB (UME) 6*2048kB (UM) 928*4096kB (UM) = 3862812kB
[ 1618.340076][ T9722] Node 0 hugepages_total=5 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB
[ 1618.340088][ T9722] 46458 total pagecache pages
[ 1618.340093][ T9722] 0 pages in swap cache
03:39:11 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
openat$cgroup_ro(r1, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f0000000040)=0x13)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc)
ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000002380))
ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
signalfd4(r0, &(0x7f0000000140)={[0x7]}, 0x8, 0x80000)
write(r2, &(0x7f00000000c0)="b4", 0xfdef)
fcntl$setstatus(r2, 0x4, 0x2400)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r5 = fsmount(0xffffffffffffffff, 0x0, 0x6)
ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f0000000000)=0x13)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc)
preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000200)=""/205, 0xcd}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/120, 0x78}], 0x4, 0x2, 0x2)

03:39:11 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x998, 0x1, 0xcd26, 0x7f, 0x4, "caf3973d8d31c0a94cb1d4234737d525833159", 0x5, 0x2})
syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

[ 1618.340096][ T9722] Swap cache stats: add 0, delete 0, find 0/0
[ 1618.340105][ T9722] Free swap  = 0kB
[ 1618.340108][ T9722] Total swap = 0kB
[ 1618.340112][ T9722] 2097051 pages RAM
[ 1618.340116][ T9722] 0 pages HighMem/MovableOnly
[ 1618.340120][ T9722] 65279 pages reserved
[ 1618.367692][ T9723] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1619.114487][ T9723] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
[ 1619.205616][ T9746] FAULT_INJECTION: forcing a failure.
[ 1619.205616][ T9746] name failslab, interval 1, probability 0, space 0, times 0
[ 1619.218344][ T9746] CPU: 0 PID: 9746 Comm: syz-executor.5 Tainted: G        W         5.13.0-syzkaller #0
[ 1619.228110][ T9746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1619.238226][ T9746] Call Trace:
[ 1619.241499][ T9746]  dump_stack_lvl+0xb7/0x103
[ 1619.247123][ T9746]  dump_stack+0x11/0x1a
[ 1619.251325][ T9746]  should_fail+0x23c/0x250
03:39:11 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

03:39:11 executing program 5 (fault-call:12 fault-nth:2):
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 1619.255917][ T9746]  __should_failslab+0x81/0x90
[ 1619.255955][ T9746]  should_failslab+0x5/0x20
[ 1619.255966][ T9746]  kmem_cache_alloc_node+0x58/0x2b0
[ 1619.256028][ T9746]  ? do_wp_page+0x5a8/0xba0
[ 1619.256038][ T9746]  ? alloc_vmap_area+0x12f/0x1340
[ 1619.256052][ T9746]  alloc_vmap_area+0x12f/0x1340
[ 1619.256064][ T9746]  ? should_fail+0xd6/0x250
[ 1619.256076][ T9746]  ? kmem_cache_alloc_node_trace+0x1f0/0x2e0
[ 1619.256135][ T9746]  __get_vm_area_node+0x165/0x260
[ 1619.256148][ T9746]  __vmalloc_node_range+0xb7/0x5a0
[ 1619.256161][ T9746]  ? netlink_sendmsg+0x425/0x7c0
[ 1619.256174][ T9746]  ? rht_key_hashfn+0x60/0x60
[ 1619.256278][ T9746]  ? netlink_hash+0x90/0x90
[ 1619.256300][ T9746]  ? netlink_sendmsg+0x425/0x7c0
[ 1619.256379][ T9746]  vmalloc+0x5a/0x70
[ 1619.256390][ T9746]  ? netlink_sendmsg+0x425/0x7c0
[ 1619.256410][ T9746]  netlink_sendmsg+0x425/0x7c0
[ 1619.256427][ T9746]  ? netlink_getsockopt+0x720/0x720
[ 1619.256495][ T9746]  kernel_sendmsg+0x97/0xd0
[ 1619.256512][ T9746]  sock_no_sendpage+0x84/0xb0
[ 1619.256534][ T9746]  ? __receive_sock+0x20/0x20
[ 1619.256553][ T9746]  kernel_sendpage+0x187/0x200
[ 1619.256565][ T9746]  ? __receive_sock+0x20/0x20
[ 1619.256612][ T9746]  sock_sendpage+0x5a/0x70
[ 1619.256628][ T9746]  pipe_to_sendpage+0x128/0x160
[ 1619.256643][ T9746]  ? sock_fasync+0xc0/0xc0
[ 1619.256657][ T9746]  __splice_from_pipe+0x207/0x500
[ 1619.256722][ T9746]  ? generic_splice_sendpage+0xb0/0xb0
[ 1619.256737][ T9746]  generic_splice_sendpage+0x80/0xb0
[ 1619.256749][ T9746]  ? iter_file_splice_write+0x750/0x750
[ 1619.256805][ T9746]  do_splice+0x9aa/0xd30
[ 1619.256818][ T9746]  ? kcsan_setup_watchpoint+0x231/0x3e0
[ 1619.256833][ T9746]  ? __fget_light+0x21b/0x260
[ 1619.256846][ T9746]  __se_sys_splice+0x2a6/0x390
[ 1619.256858][ T9746]  __x64_sys_splice+0x74/0x80
[ 1619.256870][ T9746]  do_syscall_64+0x3d/0x90
[ 1619.256958][ T9746]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1619.256972][ T9746] RIP: 0033:0x4665d9
[ 1619.256981][ T9746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1619.257031][ T9746] RSP: 002b:00007fa1ed648188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[ 1619.257042][ T9746] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[ 1619.257049][ T9746] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003
[ 1619.257056][ T9746] RBP: 00007fa1ed6481d0 R08: 0000000080000001 R09: 0000000000000000
[ 1619.257062][ T9746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1619.257068][ T9746] R13: 00007ffcc875d14f R14: 00007fa1ed648300 R15: 0000000000022000
[ 1619.318340][ T9761] FAULT_INJECTION: forcing a failure.
[ 1619.318340][ T9761] name failslab, interval 1, probability 0, space 0, times 0
[ 1619.318363][ T9761] CPU: 1 PID: 9761 Comm: syz-executor.5 Tainted: G        W         5.13.0-syzkaller #0
[ 1619.318382][ T9761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1619.318390][ T9761] Call Trace:
[ 1619.318396][ T9761]  dump_stack_lvl+0xb7/0x103
[ 1619.318417][ T9761]  dump_stack+0x11/0x1a
[ 1619.318435][ T9761]  should_fail+0x23c/0x250
[ 1619.594356][ T9761]  __should_failslab+0x81/0x90
[ 1619.594446][ T9761]  should_failslab+0x5/0x20
[ 1619.594461][ T9761]  kmem_cache_alloc_node+0x58/0x2b0
[ 1619.594483][ T9761]  ? alloc_vmap_area+0x202/0x1340
03:39:12 executing program 5 (fault-call:12 fault-nth:3):
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 1619.594502][ T9761]  alloc_vmap_area+0x202/0x1340
[ 1619.594561][ T9761]  ? kmem_cache_alloc_node_trace+0x1f0/0x2e0
[ 1619.594584][ T9761]  __get_vm_area_node+0x165/0x260
[ 1619.594606][ T9761]  __vmalloc_node_range+0xb7/0x5a0
[ 1619.594620][ T9761]  ? netlink_sendmsg+0x425/0x7c0
[ 1619.594668][ T9761]  ? rht_key_hashfn+0x60/0x60
[ 1619.594683][ T9761]  ? netlink_hash+0x90/0x90
[ 1619.594694][ T9761]  ? netlink_sendmsg+0x425/0x7c0
[ 1619.594722][ T9761]  vmalloc+0x5a/0x70
[ 1619.594745][ T9761]  ? netlink_sendmsg+0x425/0x7c0
[ 1619.594757][ T9761]  netlink_sendmsg+0x425/0x7c0
[ 1619.594770][ T9761]  ? netlink_getsockopt+0x720/0x720
[ 1619.594782][ T9761]  kernel_sendmsg+0x97/0xd0
[ 1619.594792][ T9761]  sock_no_sendpage+0x84/0xb0
[ 1619.594806][ T9761]  ? __receive_sock+0x20/0x20
[ 1619.594856][ T9761]  kernel_sendpage+0x187/0x200
[ 1619.594867][ T9761]  ? __receive_sock+0x20/0x20
[ 1619.594880][ T9761]  sock_sendpage+0x5a/0x70
[ 1619.594891][ T9761]  pipe_to_sendpage+0x128/0x160
[ 1619.594904][ T9761]  ? sock_fasync+0xc0/0xc0
[ 1619.594971][ T9761]  __splice_from_pipe+0x207/0x500
[ 1619.594982][ T9761]  ? generic_splice_sendpage+0xb0/0xb0
[ 1619.595135][ T9761]  generic_splice_sendpage+0x80/0xb0
[ 1619.595151][ T9761]  ? iter_file_splice_write+0x750/0x750
[ 1619.595167][ T9761]  do_splice+0x9aa/0xd30
[ 1619.595184][ T9761]  ? vfs_write+0x50c/0x770
[ 1619.595200][ T9761]  ? __fget_light+0x21b/0x260
[ 1619.595220][ T9761]  __se_sys_splice+0x2a6/0x390
[ 1619.595266][ T9761]  __x64_sys_splice+0x74/0x80
[ 1619.595341][ T9761]  do_syscall_64+0x3d/0x90
[ 1619.595384][ T9761]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1619.595399][ T9761] RIP: 0033:0x4665d9
[ 1619.595408][ T9761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1619.595418][ T9761] RSP: 002b:00007fa1ed648188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[ 1619.595429][ T9761] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[ 1619.595435][ T9761] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003
[ 1619.595442][ T9761] RBP: 00007fa1ed6481d0 R08: 0000000080000001 R09: 0000000000000000
[ 1619.595448][ T9761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1619.595455][ T9761] R13: 00007ffcc875d14f R14: 00007fa1ed648300 R15: 0000000000022000
[ 1619.619238][ T9760] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1619.848810][ T9760] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
03:39:12 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x998, 0x1, 0xcd26, 0x7f, 0x4, "caf3973d8d31c0a94cb1d4234737d525833159", 0x5, 0x2})
syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

[ 1619.911479][ T9773] FAULT_INJECTION: forcing a failure.
[ 1619.911479][ T9773] name failslab, interval 1, probability 0, space 0, times 0
[ 1619.924404][ T9773] CPU: 1 PID: 9773 Comm: syz-executor.5 Tainted: G        W         5.13.0-syzkaller #0
[ 1619.934111][ T9773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1619.944263][ T9773] Call Trace:
[ 1619.947603][ T9773]  dump_stack_lvl+0xb7/0x103
[ 1619.952186][ T9773]  dump_stack+0x11/0x1a
[ 1619.956332][ T9773]  should_fail+0x23c/0x250
[ 1619.960738][ T9773]  __should_failslab+0x81/0x90
[ 1619.965512][ T9773]  should_failslab+0x5/0x20
[ 1619.969999][ T9773]  kmem_cache_alloc_node_trace+0x58/0x2e0
[ 1619.975743][ T9773]  ? __kmalloc_node+0x30/0x40
[ 1619.980502][ T9773]  ? __get_vm_area_node+0x226/0x260
[ 1619.985699][ T9773]  __kmalloc_node+0x30/0x40
[ 1619.990309][ T9773]  __vmalloc_node_range+0x23a/0x5a0
[ 1619.995497][ T9773]  ? netlink_sendmsg+0x425/0x7c0
[ 1620.000436][ T9773]  vmalloc+0x5a/0x70
[ 1620.004318][ T9773]  ? netlink_sendmsg+0x425/0x7c0
[ 1620.009276][ T9773]  netlink_sendmsg+0x425/0x7c0
[ 1620.014028][ T9773]  ? netlink_getsockopt+0x720/0x720
[ 1620.019241][ T9773]  kernel_sendmsg+0x97/0xd0
[ 1620.023784][ T9773]  sock_no_sendpage+0x84/0xb0
[ 1620.028529][ T9773]  ? __receive_sock+0x20/0x20
[ 1620.033252][ T9773]  kernel_sendpage+0x187/0x200
[ 1620.038006][ T9773]  ? __receive_sock+0x20/0x20
[ 1620.042804][ T9773]  sock_sendpage+0x5a/0x70
[ 1620.047211][ T9773]  pipe_to_sendpage+0x128/0x160
[ 1620.052056][ T9773]  ? sock_fasync+0xc0/0xc0
[ 1620.056458][ T9773]  __splice_from_pipe+0x207/0x500
[ 1620.061471][ T9773]  ? generic_splice_sendpage+0xb0/0xb0
[ 1620.068996][ T9773]  generic_splice_sendpage+0x80/0xb0
[ 1620.074282][ T9773]  ? iter_file_splice_write+0x750/0x750
[ 1620.079861][ T9773]  do_splice+0x9aa/0xd30
[ 1620.084093][ T9773]  ? vfs_write+0x50c/0x770
[ 1620.088527][ T9773]  ? __fget_light+0x21b/0x260
[ 1620.093275][ T9773]  __se_sys_splice+0x2a6/0x390
[ 1620.098076][ T9773]  __x64_sys_splice+0x74/0x80
[ 1620.102747][ T9773]  do_syscall_64+0x3d/0x90
[ 1620.107180][ T9773]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1620.113304][ T9773] RIP: 0033:0x4665d9
[ 1620.117186][ T9773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1620.136951][ T9773] RSP: 002b:00007fa1ed648188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[ 1620.145375][ T9773] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[ 1620.153387][ T9773] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003
03:39:12 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', <r0=>0x0, 0x2d, 0x6, 0x5, 0x4, 0x21, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x8000, 0x3ff, 0x100}})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000640)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000700)={'ip6tnl0\x00', &(0x7f0000000680)={'syztnl1\x00', <r2=>0x0, 0x2f, 0x40, 0x5e, 0x1f000, 0x72, @local, @private2, 0x10, 0x0, 0x6, 0xffffff81}})
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000740)={0x25c, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x154, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc1, 0x5, "f322affe5bc5a95fc38fb2fac6f71ad04c754f2fa7ea50e5d28756fbb0eb4c460ce93e66d068f1f23a52ce3745093f794a38189733c51812d193932dd3f39ae08dea3257c284f7cd773139881d3436439c6fff529b714a619dbada5b31c4cebe71dc800cdf2c3532138e1a8fa8010e3b01f6a17b86bbf4b62165724a2696d1c3125d6b0d4cb06467f86fbb974ab2f7edb454eb6f71a128cacc5812c8b1d68979c37887108b698ff7857646912ab4314a21aaa39ba2c4ea1e8590fdda9f"}, @ETHTOOL_A_BITSET_BITS={0x8c, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^^+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '.!/$/).-[.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}}+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '&+//%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*#:\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x25c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r3 = semget$private(0x0, 0x1, 0x0)
r4 = semget$private(0x0, 0x4, 0x20)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000000)=[0x1000, 0x100, 0x6, 0x7042, 0x40, 0x1, 0x4, 0x0])
semop(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000000))

03:39:12 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0xa53, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000000000/0x11000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000040))
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000011c0)={0x8, {{0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0xcd9}}, 0x0, 0x9, [{{0xa, 0x4e21, 0xeea6, @private0, 0x3f}}, {{0xa, 0x4e24, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}, {{0xa, 0x4e23, 0x514, @dev={0xfe, 0x80, '\x00', 0xa}, 0x7}}, {{0xa, 0x4e24, 0x400, @dev={0xfe, 0x80, '\x00', 0x3c}, 0xd9ce}}, {{0xa, 0x4e22, 0x90, @remote, 0x400}}, {{0xa, 0x4e20, 0x101, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}}, {{0xa, 0x4e21, 0xafaeb64, @loopback, 0x401}}, {{0xa, 0x4e21, 0x3ff, @private1, 0x3}}]}, 0x510)
syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f000018f000/0x2000)=nil, &(0x7f0000309000/0x3000)=nil, 0x0, 0x0)
io_uring_enter(r2, 0x7, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x2d5b, &(0x7f0000001700)={0x0, 0x68a1, 0x10, 0x6, 0x264, 0x0, r1}, &(0x7f00006d4000/0x2000)=nil, &(0x7f000064e000/0x3000)=nil, &(0x7f0000001780), &(0x7f00000017c0))
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x10)
semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f00000001c0)=""/4096)
io_uring_enter(r2, 0x0, 0x0, 0x1, 0x0, 0x0)
r4 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
sendfile(r4, r1, 0x0, 0x1)
semctl$IPC_RMID(r0, 0x0, 0x10)

03:39:12 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r2 = fcntl$getown(0xffffffffffffffff, 0x9)
r3 = gettid()
r4 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
r5 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040))
kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000100)={0xffffffffffffffff, r5, 0x4})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

03:39:12 executing program 5 (fault-call:12 fault-nth:4):
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 1620.161527][ T9773] RBP: 00007fa1ed6481d0 R08: 0000000080000001 R09: 0000000000000000
[ 1620.169737][ T9773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1620.177786][ T9773] R13: 00007ffcc875d14f R14: 00007fa1ed648300 R15: 0000000000022000
[ 1620.293293][ T9791] FAULT_INJECTION: forcing a failure.
[ 1620.293293][ T9791] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1620.306735][ T9791] CPU: 1 PID: 9791 Comm: syz-executor.5 Tainted: G        W         5.13.0-syzkaller #0
[ 1620.316453][ T9791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1620.316465][ T9791] Call Trace:
[ 1620.316472][ T9791]  dump_stack_lvl+0xb7/0x103
[ 1620.316508][ T9791]  dump_stack+0x11/0x1a
[ 1620.316525][ T9791]  should_fail+0x23c/0x250
[ 1620.316543][ T9791]  __alloc_pages_bulk+0xfc/0x6f0
[ 1620.316559][ T9791]  ? __kmalloc_node+0x30/0x40
[ 1620.316619][ T9791]  __vmalloc_node_range+0x2ef/0x5a0
[ 1620.316638][ T9791]  ? netlink_sendmsg+0x425/0x7c0
[ 1620.316654][ T9791]  vmalloc+0x5a/0x70
[ 1620.316723][ T9791]  ? netlink_sendmsg+0x425/0x7c0
[ 1620.316740][ T9791]  netlink_sendmsg+0x425/0x7c0
[ 1620.316758][ T9791]  ? netlink_getsockopt+0x720/0x720
[ 1620.316777][ T9791]  kernel_sendmsg+0x97/0xd0
[ 1620.316792][ T9791]  sock_no_sendpage+0x84/0xb0
03:39:13 executing program 2:
r0 = semget$private(0x0, 0x4, 0x80)
semget$private(0x0, 0x3, 0x3e1)
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))
semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x6, 0x1800}, {0x2, 0x100, 0x800}, {0x3, 0x6, 0x800}, {0x0, 0x8000, 0x2000}, {0x4, 0x7f, 0x800}], 0x5, &(0x7f0000000080)={0x77359400})

03:39:13 executing program 2:
r0 = semget$private(0x0, 0x1, 0x0)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
r2 = semget$private(0x0, 0x8, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0xf000}, {0x1}], 0x3)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r2, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x10)
semtimedop(r2, &(0x7f0000000140)=[{0x3, 0x81, 0x1800}, {0x1, 0x8f2c, 0xc00}, {0x2, 0x40, 0x800}, {0x0, 0x9}, {0x4, 0x0, 0x1000}, {0x1, 0xe000, 0x800}], 0x6, &(0x7f0000000180)={0x77359400})
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
r3 = semget$private(0x0, 0x1, 0x200)
semtimedop(r3, &(0x7f00000000c0)=[{0x0, 0x1, 0x1800}, {0x1, 0x4, 0x800}, {0x0, 0xfff, 0x1000}], 0x3, &(0x7f0000000100)={0x0, 0x3938700})
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x3, 0x1f])
semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x7, 0x50, 0x9e45, 0x0, 0xda, 0x1])

[ 1620.316831][ T9791]  ? __receive_sock+0x20/0x20
[ 1620.316846][ T9791]  kernel_sendpage+0x187/0x200
[ 1620.316865][ T9791]  ? __receive_sock+0x20/0x20
[ 1620.316923][ T9791]  sock_sendpage+0x5a/0x70
[ 1620.316937][ T9791]  pipe_to_sendpage+0x128/0x160
[ 1620.316953][ T9791]  ? sock_fasync+0xc0/0xc0
[ 1620.316966][ T9791]  __splice_from_pipe+0x207/0x500
[ 1620.316982][ T9791]  ? generic_splice_sendpage+0xb0/0xb0
[ 1620.317054][ T9791]  generic_splice_sendpage+0x80/0xb0
[ 1620.435425][ T9791]  ? iter_file_splice_write+0x750/0x750
03:39:13 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1620.435494][ T9791]  do_splice+0x9aa/0xd30
[ 1620.435516][ T9791]  ? vfs_write+0x50c/0x770
[ 1620.435529][ T9791]  ? __fget_light+0x21b/0x260
[ 1620.435552][ T9791]  __se_sys_splice+0x2a6/0x390
[ 1620.435571][ T9791]  __x64_sys_splice+0x74/0x80
[ 1620.435583][ T9791]  do_syscall_64+0x3d/0x90
[ 1620.435615][ T9791]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1620.435630][ T9791] RIP: 0033:0x4665d9
[ 1620.435639][ T9791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1620.435649][ T9791] RSP: 002b:00007fa1ed648188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
03:39:13 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
io_setup(0x400, &(0x7f0000000080)=<r1=>0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
r3 = memfd_create(&(0x7f000088f000)='b\n\"', 0x4)
ftruncate(r3, 0x200000)
io_submit(r1, 0x1, &(0x7f0000000580)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000000c0)='o', 0x200000c1}])
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x0, 0x0, 0x0, 0x0, "000000001de553c82000000000000010ddff00"})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f0000000000)=0x13)

03:39:13 executing program 5 (fault-call:12 fault-nth:5):
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 1620.435660][ T9791] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[ 1620.435667][ T9791] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003
[ 1620.435673][ T9791] RBP: 00007fa1ed6481d0 R08: 0000000080000001 R09: 0000000000000000
[ 1620.435680][ T9791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1620.435691][ T9791] R13: 00007ffcc875d14f R14: 00007fa1ed648300 R15: 0000000000022000
03:39:13 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x2, 0x2f)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1620.642372][ T9809] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 1620.650732][ T9809] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000008f76a77d
[ 1620.705239][ T9820] FAULT_INJECTION: forcing a failure.
[ 1620.705239][ T9820] name failslab, interval 1, probability 0, space 0, times 0
[ 1620.717868][ T9820] CPU: 0 PID: 9820 Comm: syz-executor.5 Tainted: G        W         5.13.0-syzkaller #0
[ 1620.727576][ T9820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1620.737627][ T9820] Call Trace:
[ 1620.740896][ T9820]  dump_stack_lvl+0xb7/0x103
[ 1620.745706][ T9820]  dump_stack+0x11/0x1a
[ 1620.749946][ T9820]  should_fail+0x23c/0x250
[ 1620.754363][ T9820]  ? __build_skb+0x2d/0x170
[ 1620.759045][ T9820]  __should_failslab+0x81/0x90
[ 1620.763850][ T9820]  should_failslab+0x5/0x20
[ 1620.768347][ T9820]  kmem_cache_alloc+0x46/0x2e0
[ 1620.773180][ T9820]  __build_skb+0x2d/0x170
[ 1620.777498][ T9820]  netlink_sendmsg+0x443/0x7c0
[ 1620.782298][ T9820]  ? netlink_getsockopt+0x720/0x720
[ 1620.787493][ T9820]  kernel_sendmsg+0x97/0xd0
[ 1620.791997][ T9820]  sock_no_sendpage+0x84/0xb0
[ 1620.796739][ T9820]  ? __receive_sock+0x20/0x20
[ 1620.796764][ T9820]  kernel_sendpage+0x187/0x200
[ 1620.796786][ T9820]  ? __receive_sock+0x20/0x20
[ 1620.796844][ T9820]  sock_sendpage+0x5a/0x70
[ 1620.796859][ T9820]  pipe_to_sendpage+0x128/0x160
[ 1620.820531][ T9820]  ? sock_fasync+0xc0/0xc0
[ 1620.825284][ T9820]  __splice_from_pipe+0x207/0x500
[ 1620.830341][ T9820]  ? generic_splice_sendpage+0xb0/0xb0
[ 1620.835824][ T9820]  generic_splice_sendpage+0x80/0xb0
[ 1620.841120][ T9820]  ? iter_file_splice_write+0x750/0x750
[ 1620.846668][ T9820]  do_splice+0x9aa/0xd30
[ 1620.850917][ T9820]  ? vfs_write+0x50c/0x770
[ 1620.855323][ T9820]  ? __fget_light+0x21b/0x260
[ 1620.860045][ T9820]  __se_sys_splice+0x2a6/0x390
[ 1620.864801][ T9820]  __x64_sys_splice+0x74/0x80
[ 1620.869591][ T9820]  do_syscall_64+0x3d/0x90
[ 1620.874166][ T9820]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1620.880064][ T9820] RIP: 0033:0x4665d9
[ 1620.883945][ T9820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
03:39:13 executing program 5 (fault-call:12 fault-nth:6):
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:39:13 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0xffffffc5, 0x5e, 0x0, 0x0, 0x10, "000000041de553c82000000000000010ddff00", 0x3f, 0x9})
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000000)=0x13)

[ 1620.903568][ T9820] RSP: 002b:00007fa1ed648188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[ 1620.911989][ T9820] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[ 1620.919979][ T9820] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003
[ 1620.928184][ T9820] RBP: 00007fa1ed6481d0 R08: 0000000080000001 R09: 0000000000000000
[ 1620.936170][ T9820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1620.944206][ T9820] R13: 00007ffcc875d14f R14: 00007fa1ed648300 R15: 0000000000022000
03:39:13 executing program 0:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'bridge_slave_1\x00', 0x2}, 0x18)
preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000140)=""/165, 0xa5}, {&(0x7f0000000200)=""/159, 0x9f}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/201, 0xc9}, {&(0x7f00000013c0)=""/200, 0xc8}], 0x5, 0x3, 0x5)
r1 = semget$private(0x0, 0x8, 0x0)
semop(r1, &(0x7f0000000000)=[{}, {0x0, 0xf000}], 0x2)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semop(r1, &(0x7f0000000100)=[{0x4, 0xa358}, {0x2, 0xffff, 0x1800}, {0x3, 0x4, 0x1800}, {0x0, 0x7, 0x1000}, {0x2, 0x800, 0x1800}, {0x4, 0x1, 0x1c00}], 0x6)

[ 1621.211115][ T9835] FAULT_INJECTION: forcing a failure.
[ 1621.211115][ T9835] name failslab, interval 1, probability 0, space 0, times 0
[ 1621.224110][ T9835] CPU: 1 PID: 9835 Comm: syz-executor.5 Tainted: G        W         5.13.0-syzkaller #0
[ 1621.233816][ T9835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1621.244159][ T9835] Call Trace:
[ 1621.247575][ T9835]  dump_stack_lvl+0xb7/0x103
[ 1621.252280][ T9835]  dump_stack+0x11/0x1a
[ 1621.256433][ T9835]  should_fail+0x23c/0x250
[ 1621.260844][ T9835]  __should_failslab+0x81/0x90
[ 1621.265658][ T9835]  should_failslab+0x5/0x20
[ 1621.270153][ T9835]  kmem_cache_alloc_node_trace+0x58/0x2e0
[ 1621.276051][ T9835]  ? __kmalloc_node_track_caller+0x30/0x40
[ 1621.281842][ T9835]  ? kmem_cache_alloc_node+0x1d4/0x2b0
[ 1621.287330][ T9835]  __kmalloc_node_track_caller+0x30/0x40
[ 1621.292962][ T9835]  ? netlink_ack+0x292/0x680
[ 1621.297636][ T9835]  __alloc_skb+0x187/0x420
[ 1621.302131][ T9835]  netlink_ack+0x292/0x680
[ 1621.306583][ T9835]  netlink_rcv_skb+0x1b7/0x240
[ 1621.306629][ T9835]  ? rtnetlink_bind+0x60/0x60
[ 1621.306653][ T9835]  rtnetlink_rcv+0x18/0x20
[ 1621.306670][ T9835]  netlink_unicast+0x5ec/0x6b0
[ 1621.306723][ T9835]  netlink_sendmsg+0x6f8/0x7c0
[ 1621.306746][ T9835]  ? netlink_getsockopt+0x720/0x720
[ 1621.306768][ T9835]  kernel_sendmsg+0x97/0xd0
[ 1621.306785][ T9835]  sock_no_sendpage+0x84/0xb0
[ 1621.306888][ T9835]  ? __receive_sock+0x20/0x20
[ 1621.306987][ T9835]  kernel_sendpage+0x187/0x200
[ 1621.307007][ T9835]  ? __receive_sock+0x20/0x20
[ 1621.307024][ T9835]  sock_sendpage+0x5a/0x70
[ 1621.307114][ T9835]  pipe_to_sendpage+0x128/0x160
[ 1621.307130][ T9835]  ? sock_fasync+0xc0/0xc0
[ 1621.307149][ T9835]  __splice_from_pipe+0x207/0x500
[ 1621.307208][ T9835]  ? generic_splice_sendpage+0xb0/0xb0
[ 1621.307278][ T9835]  generic_splice_sendpage+0x80/0xb0
[ 1621.307307][ T9835]  ? iter_file_splice_write+0x750/0x750
[ 1621.394296][ T9835]  do_splice+0x9aa/0xd30
[ 1621.394340][ T9835]  ? vfs_write+0x50c/0x770
[ 1621.394354][ T9835]  ? __fget_light+0x21b/0x260
03:39:14 executing program 2 (fault-call:4 fault-nth:0):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000000c0)="b4", 0xfdef)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x1ff, 0x2, "1470a22d6f5f8f5cc595e8602c4d1d8852818f"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000000)=0x13)

[ 1621.407656][ T9835]  __se_sys_splice+0x2a6/0x390
[ 1621.407686][ T9835]  __x64_sys_splice+0x74/0x80
[ 1621.407706][ T9835]  do_syscall_64+0x3d/0x90
[ 1621.407769][ T9835]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1621.407790][ T9835] RIP: 0033:0x4665d9
[ 1621.407805][ T9835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1621.407823][ T9835] RSP: 002b:00007fa1ed648188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[ 1621.407912][ T9835] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[ 1621.407922][ T9835] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003
[ 1621.407931][ T9835] RBP: 00007fa1ed6481d0 R08: 0000000080000001 R09: 0000000000000000
03:39:14 executing program 5 (fault-call:12 fault-nth:7):
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa)
close(r2)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)