b7a884ebabaa5b39da03a5ee5b71785de78a677e0c8c7e5c31f13ed817f9daa8a1f1a21ac6da6b4282bf3355247ebbc389098b7779ec8b798134a1fa7a289e04fee218bbb6e6d420c1d30db914da661d522136151a54bef91c748f49a7af5ac5050d5b93f0729a3f10110e4961e336f1852d25acc511748776cea59a2dbbd37cc12ffed8b302cab97fb0a8a92", 0xac}, {&(0x7f0000002300)="84e75be665a4007ad92a0e8f2dbc90b2167c06163e960243547908e07b491c68630a15575b1c29b766fa2f1ccead412c153525136df1f877e7cbb0dc3f7885b7e188c1c70e27cc2a447eec343fc931ef8949df6db64edc7327f31278fe7b2762f7804e", 0x63}, {&(0x7f0000002380)="063a9871fa897c60d162b9aebd0f98156588f7cc27c40ccbfd8ee67d2df58539a444e85be79a8d6d81ef2bbb028f8e4cebb3eb52f787ae330375a06fe77ace7b651587c19f928e5c8eac0729d41b3dbc3f58a7bc1b1fb2afb8e5c9065d581f147eec1ae181519dadd59b715b3b3acb28f723cf339d558ad081e0b4702947f8b8c7e0f3039fd17aeae052ee639f041845e5499052827a8191a8af6c4289d90908b95cb72d3a8c39b9a7bbcfd94f692708cdce3f045bf3a8b233e3", 0xba}, {&(0x7f0000002440)="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", 0x1000}, {&(0x7f0000003440)="e3f80c0c07d7b3b88d05046aab7a808838d08f068c11633daba6", 0x1a}, {&(0x7f0000003480)="5acc80ba5d9f38233ab1d9311b375ab9abed749e6a5c35e69d1798ceca040e2ae97388bafa55b8ad078e3451bb0271f2bc3852b9e9e15c1dc93c34a7d94cdf262db062b4fcfa52ed87d1adb51d90fbda916edb27e9527eacf2ccf82afa00bcb95fbea44f3d775f1cc8fc575469d391bf21716ed7b5b2d8aacba95dd8cfe50a4c2be18de6dc00b5e90623bdaf821a0aab4f70a123de392d4219416fd9dc314e56a901f03e4bb219ceb5b071c2b5e93b75c97020d538f981dccdc2acc34b0ca7b634871fc6b8b4870f7231e6cee9ec969935bbcb9d13f3780ce8b6b8d99d5708bd06c6", 0xe2}, {&(0x7f0000003580)="b42cc7d6f5638fc93a7b23ea0fb7674347098a34cbd4aea19984d2fd4b7c2f1680850ca43de9ab544c46687ca1863fdf7c095524482bd7f3d9db79c8e676aa637f1b870bb94c1e622145aae326cc51ef821bf50102cea8948cf14e23e7d6d13765a203e9285bfab1e16bda088cec504d0adca1793400e96b2413c18ef856ee14bc4b682f107aa9f6eeaee8182c06d09a7b0eb24a9e3610ecc5c9ee68194c35015a8cb3f82272de0abbf6e2f4c8d6eba7d1ff8e696b755a17f420c5e829556f", 0xbf}, {&(0x7f0000003640)}], 0x9, &(0x7f0000003740)=[@sndrcv={0x30, 0x84, 0x1, {0x40000, 0x9, 0x2, 0x9, 0x100, 0x7, 0xc2b, 0x7ff}}, @init={0x18, 0x84, 0x0, {0x6, 0x81, 0xe039, 0xfffffffffffffff8}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x820a, 0x1, 0x3}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x5}}], 0x80, 0xd1f93b2646afabcb}], 0x4, 0x4000004)

23:09:04 executing program 1:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x101200, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cpu.stat\x00', 0x0, 0x0)
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4)
r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9a9a, 0x4240)
ioctl$CAPI_SET_FLAGS(r3, 0x80044324, &(0x7f00000000c0)=0x1)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'bridge_slave_0\x00', {0x2, 0x0, @local}})

23:09:04 executing program 3:
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x72)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4000, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r2, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xaf}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x14)

23:09:04 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000037c0)=[{0xfffffffffffffffd, 0x0, &(0x7f0000000700)=[{&(0x7f0000000580)="26cdc4c27bf254461b1bedb37765817466bec8967fdb9b332f8fa16137abf4264368c2480f6e03899420ab7c88dd7e1a57f6b6a71116729f49d4f874dcfc7640f3799be9c4a400dc3a9d8cbc5d11704cdf7d363fcaac4b1ade78fb69015d6ff06636ece05e78f7984a5ab1f87706ac3e9fa7e57dbd05321edc03b6fa5d92f4c90a29f06e71e7dcd87068accd315ca231f69c713eeb81ea1f783fa8f84234003c4c2a8c9d8e571e4d065f68cee22d6c2931c40391d21625078e83de456f327c2b482f612476232a75ee5a72dd21814eb62968a55d3faddd94bab6914fc55a", 0xde}, {&(0x7f0000000680)="3d8860d0f35fbfe08fcc9765ef21318d1c1c259ad37f5e3be3557ae510d39d8e32b461c0770372a6f82d79460e3c69aaca173081bf298dd09f3ed2387a70109d782e8a03698c58a66faf71f483ceeb5218a5ce85d613bb7936ebdd633f04cdff", 0x60}, {0xfffffffffffffffe}], 0x3, &(0x7f0000000740)=[@sndrcv={0x30, 0x84, 0x1, {0x10000, 0x706, 0x0, 0x3, 0xffffffffffffff03, 0x80000000, 0x6}}, @init={0x18, 0x84, 0x0, {0x9057, 0x8001, 0x7fff, 0x1}}], 0x48, 0x1}, {&(0x7f00000007c0)=@in={0x2, 0x4e21, @rand_addr=0x1}, 0x10, &(0x7f0000001a00)=[{&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="7a340b764c493157bbb695ef542907bc9624576caf015647fc878166d09cb50c9678c3757fa079a516275ec6d2686cd7894312887411a49e1b9e6625ef73d6bdb4cb831a6b13c2110a4fcb1105365bd68ff32900c0895e3fcf756fa1ae7152927a9b39a56d9c6e395f283a5c60ef8b01e6b66f", 0x73}, {&(0x7f0000001880)="ba125166b7f248d1f3afabc326508cc7e9d9d2973f5476101de1efa9ae7fa3b94af16302509e18b91defff0d115c9cd63c4a61dcdaa20fa34d633a752c80b277cbc2cea694028873440f9d3867e0ba6cf3ce31cf997b7b60e8e6ea7c0463cebac5cff506a9113ab77623d590", 0x6c}, {&(0x7f0000001900)="ff29b053804f8cb8921204d8714113347d97a7bfb18159ec706882a53be02aee472b56bbdc672287fa643bec2cef8c596f1d6b302369d192222acc50e9fdc17fdc1af0a1df63d3ee2f9b9659877ae125ba6b3ab76ed4ca2c71263a5829fc93222fae6bf99ba89be97c9182ec5c91d766189f63372892db4e6c1eef033d32cd847b21368e40812ffe3a96f91bbe710b01ee46b0594a513ff803b14d3486803e946c7d3a3976994cccf86f329c9b0d8d4fbddeedda0021f9602131dfa1abc551a188af7444d9", 0xc5}], 0x4, &(0x7f0000001a40)=[@init={0x18, 0x84, 0x0, {0x1, 0x1, 0x40, 0x1}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x202, 0x4edbd7c5, 0x7ff}}, @init={0x18, 0x84, 0x0, {0x21, 0x10001, 0x7, 0xef4}}], 0x50, 0x50}, {&(0x7f0000001ac0)=@in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x6}, 0x1c, &(0x7f0000002000)=[{&(0x7f0000001b00)="ded27537618112c022e12aa5f2aac054cf3e1666b0d1824102c61517a9688a7add2213fa6947360c9e4af5040a6aba7e4dae0b37ea8c8246bcf4a3b44229fd5a46d9aef931ef0bb6f8d2dd21986f5a19cd17e7045628b5135ba9e1cedac21ebe0fa752cbb4462d71de34f1ac7a945cd7b81023a764da3b91470ff44f390b99d8a09b88c0a2b623fe20b678a112cee83ca6112630bbf8c0d3caac85daff", 0x9d}, {&(0x7f0000001bc0)="b37a98d31f007512a61d388b9e1cb9a8b83b6e9632def6acd4bc097f429044628983190f2c511fc105ea1fabdef371ece7e5ba08b6ce0f2977816356f77022eee47ebbfb812b6edd877594fd39ba697faf3c898bad8a295a927a449299dd231c5aa7f6044a68e546f4f75c839a9764ff375a4ed51f486b8ec586afe46bc1a0c6fde079cedcd3a71212398b144059bc0bc969daa60d6e20a74db27f739bb2296b00a69b7ca06c31be27e7e2ebe098e5d9c26961a85d6cdc38a6842b4d3e04a07d839eaa092e23799f101c28bde8cb64fe21e39681674b9fb5ecbf5aac17b54ccaac833d95cd9f32658d", 0xe9}, {&(0x7f0000001cc0)="fda40534813b85045124a3808ff81d9140750611cf8160934eaafbfe05983100fc3656c0", 0x24}, {&(0x7f0000001d00)="d269191b3484b11f27d14f7504faf73371487f137d2d125076fc7cc9bbfcd64f127e5eedbbce9239dd89cbce720de146db3a956fbbeec823eb066bb4fcd9454c29f6f898e7a876a57658b938478e56e2679ca4f0c8e3a402c18695afb3ed98df987848477ed9d7eb7523ef3ff4432ff23bf59f106d4f63332e", 0x79}, {&(0x7f0000001d80)="80684044b53dac49bf0a3a35fb1be42e5685b2c90295f2d5193968809ac71178ced991adf4c4aff8475f3e8eac1d1036c4ac37a0c329702dfe19d02a1df7ff5870bc9a045adab1657b652634d2267345412034deff", 0x55}, {&(0x7f0000001e00)="3effe2c36516d2349979b8ba272150e5ef59318f744efbff4c0e2f35b6f45ddb9b526c19b5019a8fd329b685b7bc03be56a7e7660cc31af46568bdae2e18968bf968755e99bb2e272d141e9f984c84115a8c226289829655", 0x58}, {&(0x7f0000001e80)="96f1c8a25c0e7146334bab72087483341101d3fa683a6873a323b38655687771186c296c0b3e05e10244921161f183fced15459351c584ec244552cbf8393606a70be997094c68f883ca6895dc27d9fd38a80904c887efb2ba2a9ec54639ff243bc5e1ac89d1359e386eb58463dd930f3e778cbf4d67947dfb1978ea2ed375cf95f85caa", 0x84}, {&(0x7f0000001f40)="bbc22944820f6d1efb0cc00b94fff285c9b595df98c556513568e12d81c378b4f13a742be27e0fabfbdaec6ee945a5f07f565f173f3d344015355b94520f", 0x3e}, {&(0x7f0000001f80)="1c700d34d5c1b56fd89223d09582207db958b9a1181271d3c0b4da35a3cf73d0a44fd727181549fe3e1579b84b77b8c221764e07f9d3b052b36d377e", 0x3c}, {&(0x7f0000001fc0)="be46602e87cad7a5dc89e8166b22eb068ed874c0b183d7f5e4c85faccef86ed399749f590947c04bf043828545a08fef2408d49308", 0x35}], 0xa, &(0x7f00000020c0)=[@dstaddrv6={0x20, 0x84, 0x8, @rand_addr="107ed8d46320c21c87f4108618266ad6"}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}], 0x40, 0x4000}, {&(0x7f0000002100)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000003680)=[{&(0x7f0000002140)="9653c11f7f4b4d32bd79933248db159028eeccf2347576da1c7d88300c963e82ae279e1b6b55680e41a328cec52a31e5198476529d113602601b024e56b9f758ec35182e9695eaa58d7641ceb2eaec56595a3903c175fe70de43037e0e71191d71900e17c5ed09fa0a8d9a6e4b65e83a8044f881f95633020350cfaf524a9bb1571212d4ad762d9a653fb108f5a7a2cbc21d69394a27fe07b3d1f64b5a7c28384882a0738c6b7ad4bd1c6d42cfc432955b2dd3d907da937d46f10775582044d90f", 0xc1}, {&(0x7f0000002240)="8e7b9b84636b25a0553aa538b94d6faf7efa1f5c19103f09054ebdc403ba362b7a884ebabaa5b39da03a5ee5b71785de78a677e0c8c7e5c31f13ed817f9daa8a1f1a21ac6da6b4282bf3355247ebbc389098b7779ec8b798134a1fa7a289e04fee218bbb6e6d420c1d30db914da661d522136151a54bef91c748f49a7af5ac5050d5b93f0729a3f10110e4961e336f1852d25acc511748776cea59a2dbbd37cc12ffed8b302cab97fb0a8a92", 0xac}, {&(0x7f0000002300)="84e75be665a4007ad92a0e8f2dbc90b2167c06163e960243547908e07b491c68630a15575b1c29b766fa2f1ccead412c153525136df1f877e7cbb0dc3f7885b7e188c1c70e27cc2a447eec343fc931ef8949df6db64edc7327f31278fe7b2762f7804e", 0x63}, {&(0x7f0000002380)="063a9871fa897c60d162b9aebd0f98156588f7cc27c40ccbfd8ee67d2df58539a444e85be79a8d6d81ef2bbb028f8e4cebb3eb52f787ae330375a06fe77ace7b651587c19f928e5c8eac0729d41b3dbc3f58a7bc1b1fb2afb8e5c9065d581f147eec1ae181519dadd59b715b3b3acb28f723cf339d558ad081e0b4702947f8b8c7e0f3039fd17aeae052ee639f041845e5499052827a8191a8af6c4289d90908b95cb72d3a8c39b9a7bbcfd94f692708cdce3f045bf3a8b233e3", 0xba}, {&(0x7f0000002440)="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", 0x1000}, {&(0x7f0000003440)="e3f80c0c07d7b3b88d05046aab7a808838d08f068c11633daba6", 0x1a}, {&(0x7f0000003480)="5acc80ba5d9f38233ab1d9311b375ab9abed749e6a5c35e69d1798ceca040e2ae97388bafa55b8ad078e3451bb0271f2bc3852b9e9e15c1dc93c34a7d94cdf262db062b4fcfa52ed87d1adb51d90fbda916edb27e9527eacf2ccf82afa00bcb95fbea44f3d775f1cc8fc575469d391bf21716ed7b5b2d8aacba95dd8cfe50a4c2be18de6dc00b5e90623bdaf821a0aab4f70a123de392d4219416fd9dc314e56a901f03e4bb219ceb5b071c2b5e93b75c97020d538f981dccdc2acc34b0ca7b634871fc6b8b4870f7231e6cee9ec969935bbcb9d13f3780ce8b6b8d99d5708bd06c6", 0xe2}, {&(0x7f0000003580)="b42cc7d6f5638fc93a7b23ea0fb7674347098a34cbd4aea19984d2fd4b7c2f1680850ca43de9ab544c46687ca1863fdf7c095524482bd7f3d9db79c8e676aa637f1b870bb94c1e622145aae326cc51ef821bf50102cea8948cf14e23e7d6d13765a203e9285bfab1e16bda088cec504d0adca1793400e96b2413c18ef856ee14bc4b682f107aa9f6eeaee8182c06d09a7b0eb24a9e3610ecc5c9ee68194c35015a8cb3f82272de0abbf6e2f4c8d6eba7d1ff8e696b755a17f420c5e829556f", 0xbf}, {&(0x7f0000003640)}], 0x9, &(0x7f0000003740)=[@sndrcv={0x30, 0x84, 0x1, {0x40000, 0x9, 0x2, 0x9, 0x100, 0x7, 0xc2b, 0x7ff}}, @init={0x18, 0x84, 0x0, {0x6, 0x81, 0xe039, 0xfffffffffffffff8}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x820a, 0x1, 0x3}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x5}}], 0x80, 0xd1f93b2646afabcb}], 0x4, 0x4000004)

23:09:04 executing program 1:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0x9f, &(0x7f0000000040), &(0x7f00000000c0)=0xff2f)
pread64(r0, &(0x7f0000000100)=""/164, 0xa4, 0x0)

23:09:04 executing program 3:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x20, 0x400100)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x400, 0xda6, 0x3018, 0xb, 0xf, 0x6, 0x1, 0x4}})
r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000000)={0x80080000f000000, 0x1, 0x0, [], &(0x7f0000000180)={0x98f907}})

23:09:04 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000037c0)=[{0xfffffffffffffffd, 0x0, &(0x7f0000000700)=[{&(0x7f0000000580)="26cdc4c27bf254461b1bedb37765817466bec8967fdb9b332f8fa16137abf4264368c2480f6e03899420ab7c88dd7e1a57f6b6a71116729f49d4f874dcfc7640f3799be9c4a400dc3a9d8cbc5d11704cdf7d363fcaac4b1ade78fb69015d6ff06636ece05e78f7984a5ab1f87706ac3e9fa7e57dbd05321edc03b6fa5d92f4c90a29f06e71e7dcd87068accd315ca231f69c713eeb81ea1f783fa8f84234003c4c2a8c9d8e571e4d065f68cee22d6c2931c40391d21625078e83de456f327c2b482f612476232a75ee5a72dd21814eb62968a55d3faddd94bab6914fc55a", 0xde}, {&(0x7f0000000680)="3d8860d0f35fbfe08fcc9765ef21318d1c1c259ad37f5e3be3557ae510d39d8e32b461c0770372a6f82d79460e3c69aaca173081bf298dd09f3ed2387a70109d782e8a03698c58a66faf71f483ceeb5218a5ce85d613bb7936ebdd633f04cdff", 0x60}, {0xfffffffffffffffe}], 0x3, &(0x7f0000000740)=[@sndrcv={0x30, 0x84, 0x1, {0x10000, 0x706, 0x0, 0x3, 0xffffffffffffff03, 0x80000000, 0x6}}, @init={0x18, 0x84, 0x0, {0x9057, 0x8001, 0x7fff, 0x1}}], 0x48, 0x1}, {&(0x7f00000007c0)=@in={0x2, 0x4e21, @rand_addr=0x1}, 0x10, &(0x7f0000001a00)=[{&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="7a340b764c493157bbb695ef542907bc9624576caf015647fc878166d09cb50c9678c3757fa079a516275ec6d2686cd7894312887411a49e1b9e6625ef73d6bdb4cb831a6b13c2110a4fcb1105365bd68ff32900c0895e3fcf756fa1ae7152927a9b39a56d9c6e395f283a5c60ef8b01e6b66f", 0x73}, {&(0x7f0000001880)="ba125166b7f248d1f3afabc326508cc7e9d9d2973f5476101de1efa9ae7fa3b94af16302509e18b91defff0d115c9cd63c4a61dcdaa20fa34d633a752c80b277cbc2cea694028873440f9d3867e0ba6cf3ce31cf997b7b60e8e6ea7c0463cebac5cff506a9113ab77623d590", 0x6c}, {&(0x7f0000001900)="ff29b053804f8cb8921204d8714113347d97a7bfb18159ec706882a53be02aee472b56bbdc672287fa643bec2cef8c596f1d6b302369d192222acc50e9fdc17fdc1af0a1df63d3ee2f9b9659877ae125ba6b3ab76ed4ca2c71263a5829fc93222fae6bf99ba89be97c9182ec5c91d766189f63372892db4e6c1eef033d32cd847b21368e40812ffe3a96f91bbe710b01ee46b0594a513ff803b14d3486803e946c7d3a3976994cccf86f329c9b0d8d4fbddeedda0021f9602131dfa1abc551a188af7444d9", 0xc5}], 0x4, &(0x7f0000001a40)=[@init={0x18, 0x84, 0x0, {0x1, 0x1, 0x40, 0x1}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x202, 0x4edbd7c5, 0x7ff}}, @init={0x18, 0x84, 0x0, {0x21, 0x10001, 0x7, 0xef4}}], 0x50, 0x50}, {&(0x7f0000001ac0)=@in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x6}, 0x1c, &(0x7f0000002000)=[{&(0x7f0000001b00)="ded27537618112c022e12aa5f2aac054cf3e1666b0d1824102c61517a9688a7add2213fa6947360c9e4af5040a6aba7e4dae0b37ea8c8246bcf4a3b44229fd5a46d9aef931ef0bb6f8d2dd21986f5a19cd17e7045628b5135ba9e1cedac21ebe0fa752cbb4462d71de34f1ac7a945cd7b81023a764da3b91470ff44f390b99d8a09b88c0a2b623fe20b678a112cee83ca6112630bbf8c0d3caac85daff", 0x9d}, {&(0x7f0000001bc0)="b37a98d31f007512a61d388b9e1cb9a8b83b6e9632def6acd4bc097f429044628983190f2c511fc105ea1fabdef371ece7e5ba08b6ce0f2977816356f77022eee47ebbfb812b6edd877594fd39ba697faf3c898bad8a295a927a449299dd231c5aa7f6044a68e546f4f75c839a9764ff375a4ed51f486b8ec586afe46bc1a0c6fde079cedcd3a71212398b144059bc0bc969daa60d6e20a74db27f739bb2296b00a69b7ca06c31be27e7e2ebe098e5d9c26961a85d6cdc38a6842b4d3e04a07d839eaa092e23799f101c28bde8cb64fe21e39681674b9fb5ecbf5aac17b54ccaac833d95cd9f32658d", 0xe9}, {&(0x7f0000001cc0)="fda40534813b85045124a3808ff81d9140750611cf8160934eaafbfe05983100fc3656c0", 0x24}, {&(0x7f0000001d00)="d269191b3484b11f27d14f7504faf73371487f137d2d125076fc7cc9bbfcd64f127e5eedbbce9239dd89cbce720de146db3a956fbbeec823eb066bb4fcd9454c29f6f898e7a876a57658b938478e56e2679ca4f0c8e3a402c18695afb3ed98df987848477ed9d7eb7523ef3ff4432ff23bf59f106d4f63332e", 0x79}, {&(0x7f0000001d80)="80684044b53dac49bf0a3a35fb1be42e5685b2c90295f2d5193968809ac71178ced991adf4c4aff8475f3e8eac1d1036c4ac37a0c329702dfe19d02a1df7ff5870bc9a045adab1657b652634d2267345412034deff", 0x55}, {&(0x7f0000001e00)="3effe2c36516d2349979b8ba272150e5ef59318f744efbff4c0e2f35b6f45ddb9b526c19b5019a8fd329b685b7bc03be56a7e7660cc31af46568bdae2e18968bf968755e99bb2e272d141e9f984c84115a8c226289829655", 0x58}, {&(0x7f0000001e80)="96f1c8a25c0e7146334bab72087483341101d3fa683a6873a323b38655687771186c296c0b3e05e10244921161f183fced15459351c584ec244552cbf8393606a70be997094c68f883ca6895dc27d9fd38a80904c887efb2ba2a9ec54639ff243bc5e1ac89d1359e386eb58463dd930f3e778cbf4d67947dfb1978ea2ed375cf95f85caa", 0x84}, {&(0x7f0000001f40)="bbc22944820f6d1efb0cc00b94fff285c9b595df98c556513568e12d81c378b4f13a742be27e0fabfbdaec6ee945a5f07f565f173f3d344015355b94520f", 0x3e}, {&(0x7f0000001f80)="1c700d34d5c1b56fd89223d09582207db958b9a1181271d3c0b4da35a3cf73d0a44fd727181549fe3e1579b84b77b8c221764e07f9d3b052b36d377e", 0x3c}, {&(0x7f0000001fc0)="be46602e87cad7a5dc89e8166b22eb068ed874c0b183d7f5e4c85faccef86ed399749f590947c04bf043828545a08fef2408d49308", 0x35}], 0xa, &(0x7f00000020c0)=[@dstaddrv6={0x20, 0x84, 0x8, @rand_addr="107ed8d46320c21c87f4108618266ad6"}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}], 0x40, 0x4000}, {&(0x7f0000002100)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000003680)=[{&(0x7f0000002140)="9653c11f7f4b4d32bd79933248db159028eeccf2347576da1c7d88300c963e82ae279e1b6b55680e41a328cec52a31e5198476529d113602601b024e56b9f758ec35182e9695eaa58d7641ceb2eaec56595a3903c175fe70de43037e0e71191d71900e17c5ed09fa0a8d9a6e4b65e83a8044f881f95633020350cfaf524a9bb1571212d4ad762d9a653fb108f5a7a2cbc21d69394a27fe07b3d1f64b5a7c28384882a0738c6b7ad4bd1c6d42cfc432955b2dd3d907da937d46f10775582044d90f", 0xc1}, {&(0x7f0000002240)="8e7b9b84636b25a0553aa538b94d6faf7efa1f5c19103f09054ebdc403ba362b7a884ebabaa5b39da03a5ee5b71785de78a677e0c8c7e5c31f13ed817f9daa8a1f1a21ac6da6b4282bf3355247ebbc389098b7779ec8b798134a1fa7a289e04fee218bbb6e6d420c1d30db914da661d522136151a54bef91c748f49a7af5ac5050d5b93f0729a3f10110e4961e336f1852d25acc511748776cea59a2dbbd37cc12ffed8b302cab97fb0a8a92", 0xac}, {&(0x7f0000002300)="84e75be665a4007ad92a0e8f2dbc90b2167c06163e960243547908e07b491c68630a15575b1c29b766fa2f1ccead412c153525136df1f877e7cbb0dc3f7885b7e188c1c70e27cc2a447eec343fc931ef8949df6db64edc7327f31278fe7b2762f7804e", 0x63}, {&(0x7f0000002380)="063a9871fa897c60d162b9aebd0f98156588f7cc27c40ccbfd8ee67d2df58539a444e85be79a8d6d81ef2bbb028f8e4cebb3eb52f787ae330375a06fe77ace7b651587c19f928e5c8eac0729d41b3dbc3f58a7bc1b1fb2afb8e5c9065d581f147eec1ae181519dadd59b715b3b3acb28f723cf339d558ad081e0b4702947f8b8c7e0f3039fd17aeae052ee639f041845e5499052827a8191a8af6c4289d90908b95cb72d3a8c39b9a7bbcfd94f692708cdce3f045bf3a8b233e3", 0xba}, {&(0x7f0000002440)="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", 0x1000}, {&(0x7f0000003440)="e3f80c0c07d7b3b88d05046aab7a808838d08f068c11633daba6", 0x1a}, {&(0x7f0000003480)="5acc80ba5d9f38233ab1d9311b375ab9abed749e6a5c35e69d1798ceca040e2ae97388bafa55b8ad078e3451bb0271f2bc3852b9e9e15c1dc93c34a7d94cdf262db062b4fcfa52ed87d1adb51d90fbda916edb27e9527eacf2ccf82afa00bcb95fbea44f3d775f1cc8fc575469d391bf21716ed7b5b2d8aacba95dd8cfe50a4c2be18de6dc00b5e90623bdaf821a0aab4f70a123de392d4219416fd9dc314e56a901f03e4bb219ceb5b071c2b5e93b75c97020d538f981dccdc2acc34b0ca7b634871fc6b8b4870f7231e6cee9ec969935bbcb9d13f3780ce8b6b8d99d5708bd06c6", 0xe2}, {&(0x7f0000003580)="b42cc7d6f5638fc93a7b23ea0fb7674347098a34cbd4aea19984d2fd4b7c2f1680850ca43de9ab544c46687ca1863fdf7c095524482bd7f3d9db79c8e676aa637f1b870bb94c1e622145aae326cc51ef821bf50102cea8948cf14e23e7d6d13765a203e9285bfab1e16bda088cec504d0adca1793400e96b2413c18ef856ee14bc4b682f107aa9f6eeaee8182c06d09a7b0eb24a9e3610ecc5c9ee68194c35015a8cb3f82272de0abbf6e2f4c8d6eba7d1ff8e696b755a17f420c5e829556f", 0xbf}, {&(0x7f0000003640)}], 0x9, &(0x7f0000003740)=[@sndrcv={0x30, 0x84, 0x1, {0x40000, 0x9, 0x2, 0x9, 0x100, 0x7, 0xc2b, 0x7ff}}, @init={0x18, 0x84, 0x0, {0x6, 0x81, 0xe039, 0xfffffffffffffff8}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x820a, 0x1, 0x3}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x5}}], 0x80, 0xd1f93b2646afabcb}], 0x4, 0x4000004)

23:09:04 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000100)="4161658e443a51f08ad3e073c476308afa38dc3b9789cce638e22ea001c361800683d674fc6455158a351cbc57229dec2035e73baed8f580b397c460371ec6d1714143f6623ab41c962d6055760dc649af095333a85258169731fbdd251b28308fc61556cd6ad64d36cfe3da2f38254ea28a07e0e8f4f3f4bb030e")
r2 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="9efe60bfff0000000800000000001000"], 0x10)

23:09:04 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000040)=""/28, 0xfe91)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time})
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534b, &(0x7f0000000400)={{0x0, 0xffffffffffffffff}})
r1 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000100)=0x8, 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1000000000013)

23:09:05 executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffb0}})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8000, 0x0)

23:09:05 executing program 2:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000037c0)=[{0xfffffffffffffffd, 0x0, &(0x7f0000000700)=[{&(0x7f0000000580)="26cdc4c27bf254461b1bedb37765817466bec8967fdb9b332f8fa16137abf4264368c2480f6e03899420ab7c88dd7e1a57f6b6a71116729f49d4f874dcfc7640f3799be9c4a400dc3a9d8cbc5d11704cdf7d363fcaac4b1ade78fb69015d6ff06636ece05e78f7984a5ab1f87706ac3e9fa7e57dbd05321edc03b6fa5d92f4c90a29f06e71e7dcd87068accd315ca231f69c713eeb81ea1f783fa8f84234003c4c2a8c9d8e571e4d065f68cee22d6c2931c40391d21625078e83de456f327c2b482f612476232a75ee5a72dd21814eb62968a55d3faddd94bab6914fc55a", 0xde}, {&(0x7f0000000680)="3d8860d0f35fbfe08fcc9765ef21318d1c1c259ad37f5e3be3557ae510d39d8e32b461c0770372a6f82d79460e3c69aaca173081bf298dd09f3ed2387a70109d782e8a03698c58a66faf71f483ceeb5218a5ce85d613bb7936ebdd633f04cdff", 0x60}, {0xfffffffffffffffe}], 0x3, &(0x7f0000000740)=[@sndrcv={0x30, 0x84, 0x1, {0x10000, 0x706, 0x0, 0x3, 0xffffffffffffff03, 0x80000000, 0x6}}, @init={0x18, 0x84, 0x0, {0x9057, 0x8001, 0x7fff, 0x1}}], 0x48, 0x1}, {&(0x7f00000007c0)=@in={0x2, 0x4e21, @rand_addr=0x1}, 0x10, &(0x7f0000001a00)=[{&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="7a340b764c493157bbb695ef542907bc9624576caf015647fc878166d09cb50c9678c3757fa079a516275ec6d2686cd7894312887411a49e1b9e6625ef73d6bdb4cb831a6b13c2110a4fcb1105365bd68ff32900c0895e3fcf756fa1ae7152927a9b39a56d9c6e395f283a5c60ef8b01e6b66f", 0x73}, {&(0x7f0000001880)="ba125166b7f248d1f3afabc326508cc7e9d9d2973f5476101de1efa9ae7fa3b94af16302509e18b91defff0d115c9cd63c4a61dcdaa20fa34d633a752c80b277cbc2cea694028873440f9d3867e0ba6cf3ce31cf997b7b60e8e6ea7c0463cebac5cff506a9113ab77623d590", 0x6c}, {&(0x7f0000001900)="ff29b053804f8cb8921204d8714113347d97a7bfb18159ec706882a53be02aee472b56bbdc672287fa643bec2cef8c596f1d6b302369d192222acc50e9fdc17fdc1af0a1df63d3ee2f9b9659877ae125ba6b3ab76ed4ca2c71263a5829fc93222fae6bf99ba89be97c9182ec5c91d766189f63372892db4e6c1eef033d32cd847b21368e40812ffe3a96f91bbe710b01ee46b0594a513ff803b14d3486803e946c7d3a3976994cccf86f329c9b0d8d4fbddeedda0021f9602131dfa1abc551a188af7444d9", 0xc5}], 0x4, &(0x7f0000001a40)=[@init={0x18, 0x84, 0x0, {0x1, 0x1, 0x40, 0x1}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x202, 0x4edbd7c5, 0x7ff}}, @init={0x18, 0x84, 0x0, {0x21, 0x10001, 0x7, 0xef4}}], 0x50, 0x50}, {&(0x7f0000001ac0)=@in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x6}, 0x1c, &(0x7f0000002000)=[{&(0x7f0000001b00)="ded27537618112c022e12aa5f2aac054cf3e1666b0d1824102c61517a9688a7add2213fa6947360c9e4af5040a6aba7e4dae0b37ea8c8246bcf4a3b44229fd5a46d9aef931ef0bb6f8d2dd21986f5a19cd17e7045628b5135ba9e1cedac21ebe0fa752cbb4462d71de34f1ac7a945cd7b81023a764da3b91470ff44f390b99d8a09b88c0a2b623fe20b678a112cee83ca6112630bbf8c0d3caac85daff", 0x9d}, {&(0x7f0000001bc0)="b37a98d31f007512a61d388b9e1cb9a8b83b6e9632def6acd4bc097f429044628983190f2c511fc105ea1fabdef371ece7e5ba08b6ce0f2977816356f77022eee47ebbfb812b6edd877594fd39ba697faf3c898bad8a295a927a449299dd231c5aa7f6044a68e546f4f75c839a9764ff375a4ed51f486b8ec586afe46bc1a0c6fde079cedcd3a71212398b144059bc0bc969daa60d6e20a74db27f739bb2296b00a69b7ca06c31be27e7e2ebe098e5d9c26961a85d6cdc38a6842b4d3e04a07d839eaa092e23799f101c28bde8cb64fe21e39681674b9fb5ecbf5aac17b54ccaac833d95cd9f32658d", 0xe9}, {&(0x7f0000001cc0)="fda40534813b85045124a3808ff81d9140750611cf8160934eaafbfe05983100fc3656c0", 0x24}, {&(0x7f0000001d00)="d269191b3484b11f27d14f7504faf73371487f137d2d125076fc7cc9bbfcd64f127e5eedbbce9239dd89cbce720de146db3a956fbbeec823eb066bb4fcd9454c29f6f898e7a876a57658b938478e56e2679ca4f0c8e3a402c18695afb3ed98df987848477ed9d7eb7523ef3ff4432ff23bf59f106d4f63332e", 0x79}, {&(0x7f0000001d80)="80684044b53dac49bf0a3a35fb1be42e5685b2c90295f2d5193968809ac71178ced991adf4c4aff8475f3e8eac1d1036c4ac37a0c329702dfe19d02a1df7ff5870bc9a045adab1657b652634d2267345412034deff", 0x55}, {&(0x7f0000001e00)="3effe2c36516d2349979b8ba272150e5ef59318f744efbff4c0e2f35b6f45ddb9b526c19b5019a8fd329b685b7bc03be56a7e7660cc31af46568bdae2e18968bf968755e99bb2e272d141e9f984c84115a8c226289829655", 0x58}, {&(0x7f0000001e80)="96f1c8a25c0e7146334bab72087483341101d3fa683a6873a323b38655687771186c296c0b3e05e10244921161f183fced15459351c584ec244552cbf8393606a70be997094c68f883ca6895dc27d9fd38a80904c887efb2ba2a9ec54639ff243bc5e1ac89d1359e386eb58463dd930f3e778cbf4d67947dfb1978ea2ed375cf95f85caa", 0x84}, {&(0x7f0000001f40)="bbc22944820f6d1efb0cc00b94fff285c9b595df98c556513568e12d81c378b4f13a742be27e0fabfbdaec6ee945a5f07f565f173f3d344015355b94520f", 0x3e}, {&(0x7f0000001f80)="1c700d34d5c1b56fd89223d09582207db958b9a1181271d3c0b4da35a3cf73d0a44fd727181549fe3e1579b84b77b8c221764e07f9d3b052b36d377e", 0x3c}, {&(0x7f0000001fc0)="be46602e87cad7a5dc89e8166b22eb068ed874c0b183d7f5e4c85faccef86ed399749f590947c04bf043828545a08fef2408d49308", 0x35}], 0xa, &(0x7f00000020c0)=[@dstaddrv6={0x20, 0x84, 0x8, @rand_addr="107ed8d46320c21c87f4108618266ad6"}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}], 0x40, 0x4000}, {&(0x7f0000002100)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000003680)=[{&(0x7f0000002140)="9653c11f7f4b4d32bd79933248db159028eeccf2347576da1c7d88300c963e82ae279e1b6b55680e41a328cec52a31e5198476529d113602601b024e56b9f758ec35182e9695eaa58d7641ceb2eaec56595a3903c175fe70de43037e0e71191d71900e17c5ed09fa0a8d9a6e4b65e83a8044f881f95633020350cfaf524a9bb1571212d4ad762d9a653fb108f5a7a2cbc21d69394a27fe07b3d1f64b5a7c28384882a0738c6b7ad4bd1c6d42cfc432955b2dd3d907da937d46f10775582044d90f", 0xc1}, {&(0x7f0000002240)="8e7b9b84636b25a0553aa538b94d6faf7efa1f5c19103f09054ebdc403ba362b7a884ebabaa5b39da03a5ee5b71785de78a677e0c8c7e5c31f13ed817f9daa8a1f1a21ac6da6b4282bf3355247ebbc389098b7779ec8b798134a1fa7a289e04fee218bbb6e6d420c1d30db914da661d522136151a54bef91c748f49a7af5ac5050d5b93f0729a3f10110e4961e336f1852d25acc511748776cea59a2dbbd37cc12ffed8b302cab97fb0a8a92", 0xac}, {&(0x7f0000002300)="84e75be665a4007ad92a0e8f2dbc90b2167c06163e960243547908e07b491c68630a15575b1c29b766fa2f1ccead412c153525136df1f877e7cbb0dc3f7885b7e188c1c70e27cc2a447eec343fc931ef8949df6db64edc7327f31278fe7b2762f7804e", 0x63}, {&(0x7f0000002380)="063a9871fa897c60d162b9aebd0f98156588f7cc27c40ccbfd8ee67d2df58539a444e85be79a8d6d81ef2bbb028f8e4cebb3eb52f787ae330375a06fe77ace7b651587c19f928e5c8eac0729d41b3dbc3f58a7bc1b1fb2afb8e5c9065d581f147eec1ae181519dadd59b715b3b3acb28f723cf339d558ad081e0b4702947f8b8c7e0f3039fd17aeae052ee639f041845e5499052827a8191a8af6c4289d90908b95cb72d3a8c39b9a7bbcfd94f692708cdce3f045bf3a8b233e3", 0xba}, {&(0x7f0000002440)="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", 0x1000}, {&(0x7f0000003440)="e3f80c0c07d7b3b88d05046aab7a808838d08f068c11633daba6", 0x1a}, {&(0x7f0000003480)="5acc80ba5d9f38233ab1d9311b375ab9abed749e6a5c35e69d1798ceca040e2ae97388bafa55b8ad078e3451bb0271f2bc3852b9e9e15c1dc93c34a7d94cdf262db062b4fcfa52ed87d1adb51d90fbda916edb27e9527eacf2ccf82afa00bcb95fbea44f3d775f1cc8fc575469d391bf21716ed7b5b2d8aacba95dd8cfe50a4c2be18de6dc00b5e90623bdaf821a0aab4f70a123de392d4219416fd9dc314e56a901f03e4bb219ceb5b071c2b5e93b75c97020d538f981dccdc2acc34b0ca7b634871fc6b8b4870f7231e6cee9ec969935bbcb9d13f3780ce8b6b8d99d5708bd06c6", 0xe2}, {&(0x7f0000003580)="b42cc7d6f5638fc93a7b23ea0fb7674347098a34cbd4aea19984d2fd4b7c2f1680850ca43de9ab544c46687ca1863fdf7c095524482bd7f3d9db79c8e676aa637f1b870bb94c1e622145aae326cc51ef821bf50102cea8948cf14e23e7d6d13765a203e9285bfab1e16bda088cec504d0adca1793400e96b2413c18ef856ee14bc4b682f107aa9f6eeaee8182c06d09a7b0eb24a9e3610ecc5c9ee68194c35015a8cb3f82272de0abbf6e2f4c8d6eba7d1ff8e696b755a17f420c5e829556f", 0xbf}, {&(0x7f0000003640)}], 0x9, &(0x7f0000003740)=[@sndrcv={0x30, 0x84, 0x1, {0x40000, 0x9, 0x2, 0x9, 0x100, 0x7, 0xc2b, 0x7ff}}, @init={0x18, 0x84, 0x0, {0x6, 0x81, 0xe039, 0xfffffffffffffff8}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x820a, 0x1, 0x3}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x5}}], 0x80, 0xd1f93b2646afabcb}], 0x4, 0x4000004)

23:09:05 executing program 3:
r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0)
r1 = dup3(r0, r0, 0x0)
ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000100)={0x0, @reserved})
ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000540)=&(0x7f0000000500))
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000380)=@assoc_value, &(0x7f0000000400)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000480)=@assoc_value={<r2=>0x0, 0xc3}, &(0x7f00000004c0)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={<r3=>r2, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x4, 0x90ba}, &(0x7f0000000340)=0x129)
getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000440)=@assoc_value={r3, 0x5}, &(0x7f00000003c0)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={<r4=>0x0, 0x2, 0x2}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r4, 0x7}, &(0x7f0000000240)=0x8)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x98f900, 0x301, 0x0, [], &(0x7f0000000000)={0x98f90a, 0x0, [], @p_u32=0x0}})

23:09:05 executing program 0:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x400, 0x4000)
ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000100)={0x3, 0x4})
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140))
bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x140, 0x16678fe341e97dea)
write(r0, &(0x7f00000001c0)="c4e1f64e08c456a36447bc9e5c17326a", 0x10)
bind(r0, &(0x7f0000000200)=@in6={0xa, 0x4e20, 0x3, @loopback, 0x6}, 0x80)

23:09:05 executing program 2:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000037c0)=[{0xfffffffffffffffd, 0x0, &(0x7f0000000700)=[{&(0x7f0000000580)="26cdc4c27bf254461b1bedb37765817466bec8967fdb9b332f8fa16137abf4264368c2480f6e03899420ab7c88dd7e1a57f6b6a71116729f49d4f874dcfc7640f3799be9c4a400dc3a9d8cbc5d11704cdf7d363fcaac4b1ade78fb69015d6ff06636ece05e78f7984a5ab1f87706ac3e9fa7e57dbd05321edc03b6fa5d92f4c90a29f06e71e7dcd87068accd315ca231f69c713eeb81ea1f783fa8f84234003c4c2a8c9d8e571e4d065f68cee22d6c2931c40391d21625078e83de456f327c2b482f612476232a75ee5a72dd21814eb62968a55d3faddd94bab6914fc55a", 0xde}, {&(0x7f0000000680)="3d8860d0f35fbfe08fcc9765ef21318d1c1c259ad37f5e3be3557ae510d39d8e32b461c0770372a6f82d79460e3c69aaca173081bf298dd09f3ed2387a70109d782e8a03698c58a66faf71f483ceeb5218a5ce85d613bb7936ebdd633f04cdff", 0x60}, {0xfffffffffffffffe}], 0x3, &(0x7f0000000740)=[@sndrcv={0x30, 0x84, 0x1, {0x10000, 0x706, 0x0, 0x3, 0xffffffffffffff03, 0x80000000, 0x6}}, @init={0x18, 0x84, 0x0, {0x9057, 0x8001, 0x7fff, 0x1}}], 0x48, 0x1}, {&(0x7f00000007c0)=@in={0x2, 0x4e21, @rand_addr=0x1}, 0x10, &(0x7f0000001a00)=[{&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="7a340b764c493157bbb695ef542907bc9624576caf015647fc878166d09cb50c9678c3757fa079a516275ec6d2686cd7894312887411a49e1b9e6625ef73d6bdb4cb831a6b13c2110a4fcb1105365bd68ff32900c0895e3fcf756fa1ae7152927a9b39a56d9c6e395f283a5c60ef8b01e6b66f", 0x73}, {&(0x7f0000001880)="ba125166b7f248d1f3afabc326508cc7e9d9d2973f5476101de1efa9ae7fa3b94af16302509e18b91defff0d115c9cd63c4a61dcdaa20fa34d633a752c80b277cbc2cea694028873440f9d3867e0ba6cf3ce31cf997b7b60e8e6ea7c0463cebac5cff506a9113ab77623d590", 0x6c}, {&(0x7f0000001900)="ff29b053804f8cb8921204d8714113347d97a7bfb18159ec706882a53be02aee472b56bbdc672287fa643bec2cef8c596f1d6b302369d192222acc50e9fdc17fdc1af0a1df63d3ee2f9b9659877ae125ba6b3ab76ed4ca2c71263a5829fc93222fae6bf99ba89be97c9182ec5c91d766189f63372892db4e6c1eef033d32cd847b21368e40812ffe3a96f91bbe710b01ee46b0594a513ff803b14d3486803e946c7d3a3976994cccf86f329c9b0d8d4fbddeedda0021f9602131dfa1abc551a188af7444d9", 0xc5}], 0x4, &(0x7f0000001a40)=[@init={0x18, 0x84, 0x0, {0x1, 0x1, 0x40, 0x1}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x202, 0x4edbd7c5, 0x7ff}}, @init={0x18, 0x84, 0x0, {0x21, 0x10001, 0x7, 0xef4}}], 0x50, 0x50}, {&(0x7f0000001ac0)=@in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x6}, 0x1c, &(0x7f0000002000)=[{&(0x7f0000001b00)="ded27537618112c022e12aa5f2aac054cf3e1666b0d1824102c61517a9688a7add2213fa6947360c9e4af5040a6aba7e4dae0b37ea8c8246bcf4a3b44229fd5a46d9aef931ef0bb6f8d2dd21986f5a19cd17e7045628b5135ba9e1cedac21ebe0fa752cbb4462d71de34f1ac7a945cd7b81023a764da3b91470ff44f390b99d8a09b88c0a2b623fe20b678a112cee83ca6112630bbf8c0d3caac85daff", 0x9d}, {&(0x7f0000001bc0)="b37a98d31f007512a61d388b9e1cb9a8b83b6e9632def6acd4bc097f429044628983190f2c511fc105ea1fabdef371ece7e5ba08b6ce0f2977816356f77022eee47ebbfb812b6edd877594fd39ba697faf3c898bad8a295a927a449299dd231c5aa7f6044a68e546f4f75c839a9764ff375a4ed51f486b8ec586afe46bc1a0c6fde079cedcd3a71212398b144059bc0bc969daa60d6e20a74db27f739bb2296b00a69b7ca06c31be27e7e2ebe098e5d9c26961a85d6cdc38a6842b4d3e04a07d839eaa092e23799f101c28bde8cb64fe21e39681674b9fb5ecbf5aac17b54ccaac833d95cd9f32658d", 0xe9}, {&(0x7f0000001cc0)="fda40534813b85045124a3808ff81d9140750611cf8160934eaafbfe05983100fc3656c0", 0x24}, {&(0x7f0000001d00)="d269191b3484b11f27d14f7504faf73371487f137d2d125076fc7cc9bbfcd64f127e5eedbbce9239dd89cbce720de146db3a956fbbeec823eb066bb4fcd9454c29f6f898e7a876a57658b938478e56e2679ca4f0c8e3a402c18695afb3ed98df987848477ed9d7eb7523ef3ff4432ff23bf59f106d4f63332e", 0x79}, {&(0x7f0000001d80)="80684044b53dac49bf0a3a35fb1be42e5685b2c90295f2d5193968809ac71178ced991adf4c4aff8475f3e8eac1d1036c4ac37a0c329702dfe19d02a1df7ff5870bc9a045adab1657b652634d2267345412034deff", 0x55}, {&(0x7f0000001e00)="3effe2c36516d2349979b8ba272150e5ef59318f744efbff4c0e2f35b6f45ddb9b526c19b5019a8fd329b685b7bc03be56a7e7660cc31af46568bdae2e18968bf968755e99bb2e272d141e9f984c84115a8c226289829655", 0x58}, {&(0x7f0000001e80)="96f1c8a25c0e7146334bab72087483341101d3fa683a6873a323b38655687771186c296c0b3e05e10244921161f183fced15459351c584ec244552cbf8393606a70be997094c68f883ca6895dc27d9fd38a80904c887efb2ba2a9ec54639ff243bc5e1ac89d1359e386eb58463dd930f3e778cbf4d67947dfb1978ea2ed375cf95f85caa", 0x84}, {&(0x7f0000001f40)="bbc22944820f6d1efb0cc00b94fff285c9b595df98c556513568e12d81c378b4f13a742be27e0fabfbdaec6ee945a5f07f565f173f3d344015355b94520f", 0x3e}, {&(0x7f0000001f80)="1c700d34d5c1b56fd89223d09582207db958b9a1181271d3c0b4da35a3cf73d0a44fd727181549fe3e1579b84b77b8c221764e07f9d3b052b36d377e", 0x3c}, {&(0x7f0000001fc0)="be46602e87cad7a5dc89e8166b22eb068ed874c0b183d7f5e4c85faccef86ed399749f590947c04bf043828545a08fef2408d49308", 0x35}], 0xa, &(0x7f00000020c0)=[@dstaddrv6={0x20, 0x84, 0x8, @rand_addr="107ed8d46320c21c87f4108618266ad6"}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}], 0x40, 0x4000}, {&(0x7f0000002100)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000003680)=[{&(0x7f0000002140)="9653c11f7f4b4d32bd79933248db159028eeccf2347576da1c7d88300c963e82ae279e1b6b55680e41a328cec52a31e5198476529d113602601b024e56b9f758ec35182e9695eaa58d7641ceb2eaec56595a3903c175fe70de43037e0e71191d71900e17c5ed09fa0a8d9a6e4b65e83a8044f881f95633020350cfaf524a9bb1571212d4ad762d9a653fb108f5a7a2cbc21d69394a27fe07b3d1f64b5a7c28384882a0738c6b7ad4bd1c6d42cfc432955b2dd3d907da937d46f10775582044d90f", 0xc1}, {&(0x7f0000002240)="8e7b9b84636b25a0553aa538b94d6faf7efa1f5c19103f09054ebdc403ba362b7a884ebabaa5b39da03a5ee5b71785de78a677e0c8c7e5c31f13ed817f9daa8a1f1a21ac6da6b4282bf3355247ebbc389098b7779ec8b798134a1fa7a289e04fee218bbb6e6d420c1d30db914da661d522136151a54bef91c748f49a7af5ac5050d5b93f0729a3f10110e4961e336f1852d25acc511748776cea59a2dbbd37cc12ffed8b302cab97fb0a8a92", 0xac}, {&(0x7f0000002300)="84e75be665a4007ad92a0e8f2dbc90b2167c06163e960243547908e07b491c68630a15575b1c29b766fa2f1ccead412c153525136df1f877e7cbb0dc3f7885b7e188c1c70e27cc2a447eec343fc931ef8949df6db64edc7327f31278fe7b2762f7804e", 0x63}, {&(0x7f0000002380)="063a9871fa897c60d162b9aebd0f98156588f7cc27c40ccbfd8ee67d2df58539a444e85be79a8d6d81ef2bbb028f8e4cebb3eb52f787ae330375a06fe77ace7b651587c19f928e5c8eac0729d41b3dbc3f58a7bc1b1fb2afb8e5c9065d581f147eec1ae181519dadd59b715b3b3acb28f723cf339d558ad081e0b4702947f8b8c7e0f3039fd17aeae052ee639f041845e5499052827a8191a8af6c4289d90908b95cb72d3a8c39b9a7bbcfd94f692708cdce3f045bf3a8b233e3", 0xba}, {&(0x7f0000002440)="08775a9951990e7161cdb1624bfff9f5bbe4d25ef76950e7867528e645ed8b3396f2b0f4768558e4ce4dcf869c7dce91bbd19bc13b76aa6726b583c1b3e9e07ce171071d8cc6728ec4cf108dfc0f6dade995b56b0f2f3f14c54c99c90bade1acc4c26a0cb1e374f45f0c8f6c701a52f702b3a2a7e614ad8d7cf6ba415bf6064f80d57f53600b0b96d096fdb8af031b0a6bdd39a1066ac166d84cdbcc3d2a024831344efb495df57adf226de5e35f52551812c5c71b8d54406708b533b31418d31c03930dbb43e2201ed4287b0cffcf92d6b49e6cef0be738f11866a619e2871b17a3e1fd7d5ddb71291c0b71f89e8dcd4448774ac579e809cbdae01b7cdee33ba00f72f85e9687f8f56e9e5e833425e1f210a0fe8a52a9f2087f00207a9dd154c10dfc1ad56454aa8a613260b357ec78bec61e5b8b728fe377d7ed330b83d8b4f760d1169b66843995e24636d82feff6ba78734a7205cf530a0dec79f10625c40906bf6dd10a5f5ce3738ec5de40d2f519b6bbe2f37c935034d791474df9dc19062980cdeb6500e1cd4627aacaa4d67406ceb1f37a531e84944bbe60af2f524c8026e4743978654be2381e3e85ece711e14699d7f31584b987ab20fbcc608d48da51b60ab07774efcdd48aa45e6f16a76168ee46f90d3a69cf51d79d1c7be64961521ab4f4b1ab7ac74ea712ae42b7a258d3e339a53978fa24d9d4f13bfefbe6ed59c66365a7fb3aa778af7b8cd8191d07c80695c79133dd83c6ef7e13f45d6dd9abd780f18df17b6cf360520edd3dd66c07f245aa28e6ce2b1b09e1ccf5e0c681c67f7b13b9ac1c1d307ea803e4d342db002da0559fc178e24715298500e3f86d1511c4e480773020bb6f3779eafce0a9db64b7d722f1e5d10c5ad3b3697368e7caaa31684c60629d035e2ec41c8b98eba1ebbc4396cd26975107da93aa20b7e50dec3dbaede2e254a5d9ba701ddd3be13591f4a3798d2a987c0129ec6698acd44c524aba670ae4c5161790151f588ffb7df89d1f5d05f1e68815e59b65bf977de1bb4e5105a40b00cc0a87a1388652279bf3211eb51783c6a31ae53db08be8d6a7cf2c979bb4581d91bfb8518e5313f8b220e2f0b9e862425dac6390a4ab36209ad6c2d9aab251b1ab42fc7ee28734217818c78bd9c6e393d399793596f9547a4e056fa3859910eb378d027f5ac2250ef81145f5fcc378f6fe4bfb87e62073514ef88b36dd98b7e681a5995daae1d6080e139c168d737fb021dbead54a3ebdeea6f53a1b2bcc7c46046d0d2aa0e2322f062636a3f82fd8398a3669b29cd182f8bdb78722c7cf6308dd87e00a83a1db3059585f438a40edef401fcac195e2e642a1a263ff02d5709d2642e069be5bb2628f2e46c64eb83ebc575e658af2395eb97c4be4031f3fd3370d33e08971d9c5652ed536a26f893957be2dbab7f48406780c0f2d9a8301fabce4e29fd124c26d2f707ec2421c553b043d8c8c19ded62e64afbdd05a65a9b636cc010bd2a64b0d9e0fe0cfd0131381a389485f78652be8873c2c0d7837538e313be548bbec3852285d87aaa91b80bdeac028c9007b41af7ed55c76edf0366bf1a57ad8d4a104273c58e4c01d6aba1b7ed6ffb88ebb17bb81df8e052a0809e0731073eac81221aac5e0eca06202faf79850e539020b6764f8af8139f050144d08b833394e85dfad82255d0d26e33fb2aa1e070de0ee7b0ff0421e3cdfbaba61a85f7898b4bd768bc2a6587985f0e8a77cf7f9f54add27437d0dc1969227b055411a862281158a2500a5388e7ad146d6243fe8c68baa29bfd2526c8f248451ddde30799dd79530663c0a01b2a627ae9977be0dce066ad196b982bb392a4c001b521ccea2ac716dd2ac5d4ddc2e5f568f3e4cb29c70913dc9ee5a5e31d4741f144eae11ea97feb853837b5e4bc290bb19314b2022f947d50ff9f7891f465d749d4ea9787957548f39629fb84c30d65278c89d080a7c80d724c1121abd6ad0bb6cc6c1d27e9a15f039339aa71adef1eb9db30d8aa980c1679bf8ca508f26fb13e52f26526594c431765d0af57635b4c80a4b54b4bb206ef930fb7bb194ebbe9b263350b765b7c1c4831d03de35ca533a6b82844a4de3f27b6431b8e074a5516c2eabe90424962d0f5649a344658ec2ffeae0788338be539883e2b82c5a5549344eb4ac20f34a2d8659182ab1af196471411efefb3a32b97c7207de6d00b57c974bbfb99e778c611c3426e8c88187e28abd72b0815894e5d0274ef74150fb6d328e9d712d3c0d4a56a3f7c39000a15ead76d27b68c8df1b04315f93a9f8cfc38b77fe14ebf147bcb4047f78bacc3b9b9879dadb3691572d83f3e91f7012b1d98c8845c9a8dbb0c88d7534a1e2ead17e525ff50f204be3c6fe787660a72051317f1dd898554595b9148ff88075f9aba6b9fda557ef53e1d574b04cb980e3666b1fb9b0c62d885c24953588df3ccffea5d91afc33084521cf7c4563ac08083dd333ad7cf66e125f049d40441d5943769f49047f91230630fd910806cadd35b5a30f08a214b2d1bd9e001aa940c6533e95fcde6dbcba00e1c53d769b3666916ad4c61aa19696aff8a8453e185f58f2f09d231443b8afe955b4a49a42e77f5ba93738ccd7f8d2036e1f0ad1cc8685bb21424457ce8638b8e6360929f56453b485f33b8ca74b18405e0f82413b60454f1f7d5d02350ce2f15c19536e863ab1e4183cb6ea95a97de203c5ff2f5136fc9e720869cad5f866186dee917ccf92d3b75ff092a00d06fab7499c1982f3d4ab6ab00c4bb169f8bb4f8d6bc80d8682a0bb571f4408a71ed047a8700fd6500506b1b9b9e4e757b8d0a90833495648a39da79fba11a0dbcfb1a35b1109b0e00bc6e7f92970e6ba069fefd4c69f960a95ac7f3f8a84782ad2f7b8cb6173ee13fb4113e97eae5b5d57cfd33fb7cefb965ad5b111dabb2f2e242172c2a5495b7a7a6b30e4a440489eebe479a2730d77f7f9d3fd445dcccefd47dd4516640aee3d864d0e1da92219455a31915606a2ec8af9e1db055591f804ee7982e66d902254a7136d19f7355a8aa2864bfada818920a960fbccb7c91cbbd4846f53794d79564fbc38c7a3f9299a170212c7d3ed4e279287f80ca497063c02347463c4928940609275150c66651c76cfd9d34ecd79159ccd7b2e3b834ac554ea030b416f4785404edc56f0991fe3deaf28752b64f9f6c018b78b45412ab1ff94817296a97df72a8e6e25f21a07affb1a956a59897f10872b18197946487f104c35a8e8569817808f5726f8872acf1a25d88e3f12bfa894dea77f09385e218adf2cf8d5ec57dbd22ad357ebf4b862376a42413febad078383a9041752bd3e0dfe437e40b45295503c4a9d8d624b5f214e0d42a86d10b81bbc02b12db2c42ef72cef2f57204b2d504c20710134feb5beef5b4823e42c59ba387d42df12d7f020527ff43f199ae8789c5198efcb0cd56abdd923f7139061d5aa6670006fd1216d1b7031d2a5bad5ad4ea93a50fc668d74bb1bab6ded88ed9314186850980eb035b62de8558f09d95bececf98b3db957a745471c5eaff682362567180ddb2ec860c0b2ee755ab530f25f8ac0f41017221718017003127810cbe1ed5eb892270da9b2643184dc7d54bcf2db25652ab0413b5fd9a071f5dc1bb73be6776a002f48a062cd489e1662c4ae45976163f08f17f234e85f412b34fb7879ca8e688bcf8713dbc5544aefcbb8ce6a7dd274fe0cc4defdd20a1dd7bee742d07bd421058d1e56da196eb597800cf92ea6815f88101cfecb6ca6fd52b7a602025efa2d306322d730b101917e5ea7c5eb1d228327b1c2d49af5f201b71093bc76e0af64bec954b2afd43e2ee65117aee3c710921ab42c53fe7276d3bf2fb3b68854ffcb49005507f7a1883c8f412f01012e109eaa23b03780b00869deafb33a56b8a4c2a8f98ddb1798c06ad805463f6fed0a12367646ca728886dbc38248b8ea6b2f58fb4c19568c7bc5028d52d8a240f6fac51daf9ddd8285b3fffdf11921382017a9afef042c3e6b1b10b97b1d6a9392d6108ae40df7c9d7f9ad970c23dc66d0dda28da28eab73a67f08bf235f89e69fbca8703bcaa2a9451fdeca0053e3e684f619bc7d1d1113a6ba61b6ef3e769af6745c4bd5a8442f685981753f14eba1adafb9bdaa9afb2ac34192552d8ad0d65949eee6939a8d1a72f0ec3f86e22a6eef35754066bec0181835a6544c61d006136e12b01eeba2bff27dac3f9e6cd3b194f5c25748ac58422dc9971fec8000d7fa5533c9febf44623fc56c68e9fc687f440d22759b4403b675f02104c7284f8ceea86fcf7d644bb43a90d3fa39dbf0a5dfee79e458e3613ba35a2b96992f966124bb2bbe88c0d57137e8b28a7ae6edbba94792d3cee4540b6bdb4208d74d060e31ac556206974a735bcacb063bb243d1aca0b23f5244ceaab74c5462c8fe826626c5edb9b0baa6ace3aa9281cfee417744574fd07de47d07dbcafb5b1ebd45bf0be920c9feb97debb417b03dd1a67a5d1161758c93750a1277066fe339ed5a830211a048d59dcfe489056dc750a5049b65c2d5bd6ea776526ebde0b8f7544da7416433820545bc9323360d653b8e314cdb35739fce74c5bc2ea7142c4b989a7933f47ed2734677c5e82b1b4ec5ef825ed1288696ebd5eff564d144cb0faee885a2c735d33870dff8a977a73298849f303b53663823301320f368762411e8beb8b572082e10abe1d3b1771a5a4a50b8eb60ef052c148fb777fa7378f4b97ce81bcb47f2b68405650513d5baf2bc12a3beb2f3544eefe2afe333c6a2d04d7b2131dbbfd628851db757309310d6ab80e8ed967fc039d306462271e638e55a722f37710a75fe6e5b6703badac7ed7540f566d6b59910ce2af8e806c4d02b5b3b3a0d3422eb599a8b3fe10b259e7b0616532b60a59e42d78010766492c49027da8ba3570d3210881050bb724d87e10cda3bd19e5b20b19f1659624d84ecfca4b22828c03881494813a32d16af1d5341363a4829ecb2296d6f703b067b8049d996c5dba8c00e193179ef61e65110caad3a1dd7ba17089c92f889f72e50cbf393688bb39f4d048423c6ef059d9fa71590e59a53ad78ca50db68ed0f9d499607da4a27b24094b803eb58f2f73c66dc61f022fb2c29edbc8efa87bcdaf535d9811b0b9e926721c3d2b23a97e97307c1dcac3d21011f55a32e0be6595bb15b2aa90542e20da9c13e49faa8787e0b2470b3cc482dd87f04dd43e2c266d3defde39f3a7b4f27122c179fa8189e53b2d1cb0cde9f0ce7ade6623e9d6835f72e5f87677a897d7af04d5f4ffc7e2cf421f614947f6851d0fba6ddb0f505172b866da8a69e529a46babf251f6a1c010d7afdc2bea31f0f3a8935c415bf52251b34859356409cb93d59c93587c63c54fa407343d1efdd312a9d7e7e7cc0a7cb5e1ec609071ffae15e3cee990de14e8cac2e3bb50782c5b466e813edd3f9e9821eadb1ccf3ae2b5fcd482c4a3d96532dd63ab8985cf65da9f8dbc72aa4d9da4d56c88131ec10d8a79df45ec0f4fed97f65529d687105ba3cd9e5cd5ae602c65a8a52ea2cd3c56bf6d7732784b3daecba0ad2ccb674f9be2d42fcaeed52d8b22072f284192a2fb464f92072ba624948c87aa898ef9fb1de3a011b677a078157fbd21a55a2188700d0e8a7830ee75c55bf668b3f3533e7627713fab087335543a09eda59db6e06aea0c2da70a44c0b5d08d1064d5b1de694b870fb53cff34a620507d24b291ef9de2c435d758e5ea0fe343041d3019a6d", 0x1000}, {&(0x7f0000003440)="e3f80c0c07d7b3b88d05046aab7a808838d08f068c11633daba6", 0x1a}, {&(0x7f0000003480)="5acc80ba5d9f38233ab1d9311b375ab9abed749e6a5c35e69d1798ceca040e2ae97388bafa55b8ad078e3451bb0271f2bc3852b9e9e15c1dc93c34a7d94cdf262db062b4fcfa52ed87d1adb51d90fbda916edb27e9527eacf2ccf82afa00bcb95fbea44f3d775f1cc8fc575469d391bf21716ed7b5b2d8aacba95dd8cfe50a4c2be18de6dc00b5e90623bdaf821a0aab4f70a123de392d4219416fd9dc314e56a901f03e4bb219ceb5b071c2b5e93b75c97020d538f981dccdc2acc34b0ca7b634871fc6b8b4870f7231e6cee9ec969935bbcb9d13f3780ce8b6b8d99d5708bd06c6", 0xe2}, {&(0x7f0000003580)="b42cc7d6f5638fc93a7b23ea0fb7674347098a34cbd4aea19984d2fd4b7c2f1680850ca43de9ab544c46687ca1863fdf7c095524482bd7f3d9db79c8e676aa637f1b870bb94c1e622145aae326cc51ef821bf50102cea8948cf14e23e7d6d13765a203e9285bfab1e16bda088cec504d0adca1793400e96b2413c18ef856ee14bc4b682f107aa9f6eeaee8182c06d09a7b0eb24a9e3610ecc5c9ee68194c35015a8cb3f82272de0abbf6e2f4c8d6eba7d1ff8e696b755a17f420c5e829556f", 0xbf}, {&(0x7f0000003640)}], 0x9, &(0x7f0000003740)=[@sndrcv={0x30, 0x84, 0x1, {0x40000, 0x9, 0x2, 0x9, 0x100, 0x7, 0xc2b, 0x7ff}}, @init={0x18, 0x84, 0x0, {0x6, 0x81, 0xe039, 0xfffffffffffffff8}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x820a, 0x1, 0x3}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x5}}], 0x80, 0xd1f93b2646afabcb}], 0x4, 0x4000004)

23:09:05 executing program 3:
mknod(&(0x7f0000000200)='./file0\x00', 0x1020, 0x0)
r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x4000000000001a4)
r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x95)
r2 = add_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000240)="263364828a8ddfc70496c9bc0b1cd34435824c5d1bade6914f46d8ab83dea10c5bcf6476f3f47a6b5b495715307aaee219269caf7824f78bdfaf4287b0b3a048d15fd074ee9266d1d77f359ff15256d9bebaed51819f639ea8ce1a0f5bcc3860d06ce8f27fdd8a95ff05390e43808a307446d741743e02753f0fd143ee6b171f391fb39a092e15b7610f6f44a40fdf1c7bd30dcbfbde238060f061c5e531d1c91f489b8a26d3b54cb7bbe0fe30606c1cd5878d9a5f8716cdcc60f8d748d9ee6009e89e0b3922547c07b2a4", 0xcb, 0xfffffffffffffffe)
r3 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)="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", 0xfe, 0xfffffffffffffffa)
keyctl$search(0xa, r2, &(0x7f0000000340)='trusted\x00', &(0x7f0000000380)={'syz', 0x1}, r3)
setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e21, 0xe29, @remote, 0x2d9}, {0xa, 0x4e24, 0x0, @empty, 0x8000}, 0x7, [0x6, 0x80000001, 0xfffffffffffff801, 0xb40, 0xfffffffffffffffb, 0x80000001, 0x7fffffff, 0xcc000000]}, 0x5c)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x3)
close(r1)

23:09:05 executing program 0:
r0 = syz_open_dev$dmmidi(&(0x7f0000000480)='/dev/dmmidi#\x00', 0x6957, 0x400800)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={<r1=>0x0, @in6={{0xa, 0x4e24, 0x868, @ipv4={[], [], @multicast2}, 0x1}}, 0x2, 0x4}, &(0x7f00000002c0)=0x90)
mlock2(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x1)
setsockopt$inet6_opts(r0, 0x29, 0x1, &(0x7f00000003c0)=@routing={0x2, 0x12, 0x2, 0x1, 0x0, [@rand_addr="107486421cf494d19764648cb950f30a", @rand_addr="1dfe8bd24e1ad8947431b82db8556f62", @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x26}}, @dev={0xfe, 0x80, [], 0xc}, @mcast2, @empty, @local, @rand_addr="d6d6776236f042e29c30c7c8bfd3a2b2", @empty]}, 0x98)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000300)={r1, @in={{0x2, 0x4e24, @remote}}}, 0x84)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r0})
write$P9_RSYMLINK(r0, &(0x7f0000000100)={0x14, 0x11, 0x1, {0x44, 0x0, 0x8}}, 0x14)
clone(0x13102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
wait4(0x0, &(0x7f0000000000), 0x40000000, &(0x7f00000004c0))

23:09:05 executing program 2:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000037c0)=[{0xfffffffffffffffd, 0x0, &(0x7f0000000700)=[{&(0x7f0000000580)="26cdc4c27bf254461b1bedb37765817466bec8967fdb9b332f8fa16137abf4264368c2480f6e03899420ab7c88dd7e1a57f6b6a71116729f49d4f874dcfc7640f3799be9c4a400dc3a9d8cbc5d11704cdf7d363fcaac4b1ade78fb69015d6ff06636ece05e78f7984a5ab1f87706ac3e9fa7e57dbd05321edc03b6fa5d92f4c90a29f06e71e7dcd87068accd315ca231f69c713eeb81ea1f783fa8f84234003c4c2a8c9d8e571e4d065f68cee22d6c2931c40391d21625078e83de456f327c2b482f612476232a75ee5a72dd21814eb62968a55d3faddd94bab6914fc55a", 0xde}, {&(0x7f0000000680)="3d8860d0f35fbfe08fcc9765ef21318d1c1c259ad37f5e3be3557ae510d39d8e32b461c0770372a6f82d79460e3c69aaca173081bf298dd09f3ed2387a70109d782e8a03698c58a66faf71f483ceeb5218a5ce85d613bb7936ebdd633f04cdff", 0x60}, {0xfffffffffffffffe}], 0x3, &(0x7f0000000740)=[@sndrcv={0x30, 0x84, 0x1, {0x10000, 0x706, 0x0, 0x3, 0xffffffffffffff03, 0x80000000, 0x6}}, @init={0x18, 0x84, 0x0, {0x9057, 0x8001, 0x7fff, 0x1}}], 0x48, 0x1}, {&(0x7f00000007c0)=@in={0x2, 0x4e21, @rand_addr=0x1}, 0x10, &(0x7f0000001a00)=[{&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="7a340b764c493157bbb695ef542907bc9624576caf015647fc878166d09cb50c9678c3757fa079a516275ec6d2686cd7894312887411a49e1b9e6625ef73d6bdb4cb831a6b13c2110a4fcb1105365bd68ff32900c0895e3fcf756fa1ae7152927a9b39a56d9c6e395f283a5c60ef8b01e6b66f", 0x73}, {&(0x7f0000001880)="ba125166b7f248d1f3afabc326508cc7e9d9d2973f5476101de1efa9ae7fa3b94af16302509e18b91defff0d115c9cd63c4a61dcdaa20fa34d633a752c80b277cbc2cea694028873440f9d3867e0ba6cf3ce31cf997b7b60e8e6ea7c0463cebac5cff506a9113ab77623d590", 0x6c}, {&(0x7f0000001900)="ff29b053804f8cb8921204d8714113347d97a7bfb18159ec706882a53be02aee472b56bbdc672287fa643bec2cef8c596f1d6b302369d192222acc50e9fdc17fdc1af0a1df63d3ee2f9b9659877ae125ba6b3ab76ed4ca2c71263a5829fc93222fae6bf99ba89be97c9182ec5c91d766189f63372892db4e6c1eef033d32cd847b21368e40812ffe3a96f91bbe710b01ee46b0594a513ff803b14d3486803e946c7d3a3976994cccf86f329c9b0d8d4fbddeedda0021f9602131dfa1abc551a188af7444d9", 0xc5}], 0x4, &(0x7f0000001a40)=[@init={0x18, 0x84, 0x0, {0x1, 0x1, 0x40, 0x1}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x202, 0x4edbd7c5, 0x7ff}}, @init={0x18, 0x84, 0x0, {0x21, 0x10001, 0x7, 0xef4}}], 0x50, 0x50}, {&(0x7f0000001ac0)=@in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x6}, 0x1c, &(0x7f0000002000)=[{&(0x7f0000001b00)="ded27537618112c022e12aa5f2aac054cf3e1666b0d1824102c61517a9688a7add2213fa6947360c9e4af5040a6aba7e4dae0b37ea8c8246bcf4a3b44229fd5a46d9aef931ef0bb6f8d2dd21986f5a19cd17e7045628b5135ba9e1cedac21ebe0fa752cbb4462d71de34f1ac7a945cd7b81023a764da3b91470ff44f390b99d8a09b88c0a2b623fe20b678a112cee83ca6112630bbf8c0d3caac85daff", 0x9d}, {&(0x7f0000001bc0)="b37a98d31f007512a61d388b9e1cb9a8b83b6e9632def6acd4bc097f429044628983190f2c511fc105ea1fabdef371ece7e5ba08b6ce0f2977816356f77022eee47ebbfb812b6edd877594fd39ba697faf3c898bad8a295a927a449299dd231c5aa7f6044a68e546f4f75c839a9764ff375a4ed51f486b8ec586afe46bc1a0c6fde079cedcd3a71212398b144059bc0bc969daa60d6e20a74db27f739bb2296b00a69b7ca06c31be27e7e2ebe098e5d9c26961a85d6cdc38a6842b4d3e04a07d839eaa092e23799f101c28bde8cb64fe21e39681674b9fb5ecbf5aac17b54ccaac833d95cd9f32658d", 0xe9}, {&(0x7f0000001cc0)="fda40534813b85045124a3808ff81d9140750611cf8160934eaafbfe05983100fc3656c0", 0x24}, {&(0x7f0000001d00)="d269191b3484b11f27d14f7504faf73371487f137d2d125076fc7cc9bbfcd64f127e5eedbbce9239dd89cbce720de146db3a956fbbeec823eb066bb4fcd9454c29f6f898e7a876a57658b938478e56e2679ca4f0c8e3a402c18695afb3ed98df987848477ed9d7eb7523ef3ff4432ff23bf59f106d4f63332e", 0x79}, {&(0x7f0000001d80)="80684044b53dac49bf0a3a35fb1be42e5685b2c90295f2d5193968809ac71178ced991adf4c4aff8475f3e8eac1d1036c4ac37a0c329702dfe19d02a1df7ff5870bc9a045adab1657b652634d2267345412034deff", 0x55}, {&(0x7f0000001e00)="3effe2c36516d2349979b8ba272150e5ef59318f744efbff4c0e2f35b6f45ddb9b526c19b5019a8fd329b685b7bc03be56a7e7660cc31af46568bdae2e18968bf968755e99bb2e272d141e9f984c84115a8c226289829655", 0x58}, {&(0x7f0000001e80)="96f1c8a25c0e7146334bab72087483341101d3fa683a6873a323b38655687771186c296c0b3e05e10244921161f183fced15459351c584ec244552cbf8393606a70be997094c68f883ca6895dc27d9fd38a80904c887efb2ba2a9ec54639ff243bc5e1ac89d1359e386eb58463dd930f3e778cbf4d67947dfb1978ea2ed375cf95f85caa", 0x84}, {&(0x7f0000001f40)="bbc22944820f6d1efb0cc00b94fff285c9b595df98c556513568e12d81c378b4f13a742be27e0fabfbdaec6ee945a5f07f565f173f3d344015355b94520f", 0x3e}, {&(0x7f0000001f80)="1c700d34d5c1b56fd89223d09582207db958b9a1181271d3c0b4da35a3cf73d0a44fd727181549fe3e1579b84b77b8c221764e07f9d3b052b36d377e", 0x3c}, {&(0x7f0000001fc0)="be46602e87cad7a5dc89e8166b22eb068ed874c0b183d7f5e4c85faccef86ed399749f590947c04bf043828545a08fef2408d49308", 0x35}], 0xa, &(0x7f00000020c0)=[@dstaddrv6={0x20, 0x84, 0x8, @rand_addr="107ed8d46320c21c87f4108618266ad6"}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}], 0x40, 0x4000}, {&(0x7f0000002100)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000003680)=[{&(0x7f0000002140)="9653c11f7f4b4d32bd79933248db159028eeccf2347576da1c7d88300c963e82ae279e1b6b55680e41a328cec52a31e5198476529d113602601b024e56b9f758ec35182e9695eaa58d7641ceb2eaec56595a3903c175fe70de43037e0e71191d71900e17c5ed09fa0a8d9a6e4b65e83a8044f881f95633020350cfaf524a9bb1571212d4ad762d9a653fb108f5a7a2cbc21d69394a27fe07b3d1f64b5a7c28384882a0738c6b7ad4bd1c6d42cfc432955b2dd3d907da937d46f10775582044d90f", 0xc1}, {&(0x7f0000002240)="8e7b9b84636b25a0553aa538b94d6faf7efa1f5c19103f09054ebdc403ba362b7a884ebabaa5b39da03a5ee5b71785de78a677e0c8c7e5c31f13ed817f9daa8a1f1a21ac6da6b4282bf3355247ebbc389098b7779ec8b798134a1fa7a289e04fee218bbb6e6d420c1d30db914da661d522136151a54bef91c748f49a7af5ac5050d5b93f0729a3f10110e4961e336f1852d25acc511748776cea59a2dbbd37cc12ffed8b302cab97fb0a8a92", 0xac}, {&(0x7f0000002300)="84e75be665a4007ad92a0e8f2dbc90b2167c06163e960243547908e07b491c68630a15575b1c29b766fa2f1ccead412c153525136df1f877e7cbb0dc3f7885b7e188c1c70e27cc2a447eec343fc931ef8949df6db64edc7327f31278fe7b2762f7804e", 0x63}, {&(0x7f0000002380)="063a9871fa897c60d162b9aebd0f98156588f7cc27c40ccbfd8ee67d2df58539a444e85be79a8d6d81ef2bbb028f8e4cebb3eb52f787ae330375a06fe77ace7b651587c19f928e5c8eac0729d41b3dbc3f58a7bc1b1fb2afb8e5c9065d581f147eec1ae181519dadd59b715b3b3acb28f723cf339d558ad081e0b4702947f8b8c7e0f3039fd17aeae052ee639f041845e5499052827a8191a8af6c4289d90908b95cb72d3a8c39b9a7bbcfd94f692708cdce3f045bf3a8b233e3", 0xba}, {&(0x7f0000002440)="08775a9951990e7161cdb1624bfff9f5bbe4d25ef76950e7867528e645ed8b3396f2b0f4768558e4ce4dcf869c7dce91bbd19bc13b76aa6726b583c1b3e9e07ce171071d8cc6728ec4cf108dfc0f6dade995b56b0f2f3f14c54c99c90bade1acc4c26a0cb1e374f45f0c8f6c701a52f702b3a2a7e614ad8d7cf6ba415bf6064f80d57f53600b0b96d096fdb8af031b0a6bdd39a1066ac166d84cdbcc3d2a024831344efb495df57adf226de5e35f52551812c5c71b8d54406708b533b31418d31c03930dbb43e2201ed4287b0cffcf92d6b49e6cef0be738f11866a619e2871b17a3e1fd7d5ddb71291c0b71f89e8dcd4448774ac579e809cbdae01b7cdee33ba00f72f85e9687f8f56e9e5e833425e1f210a0fe8a52a9f2087f00207a9dd154c10dfc1ad56454aa8a613260b357ec78bec61e5b8b728fe377d7ed330b83d8b4f760d1169b66843995e24636d82feff6ba78734a7205cf530a0dec79f10625c40906bf6dd10a5f5ce3738ec5de40d2f519b6bbe2f37c935034d791474df9dc19062980cdeb6500e1cd4627aacaa4d67406ceb1f37a531e84944bbe60af2f524c8026e4743978654be2381e3e85ece711e14699d7f31584b987ab20fbcc608d48da51b60ab07774efcdd48aa45e6f16a76168ee46f90d3a69cf51d79d1c7be64961521ab4f4b1ab7ac74ea712ae42b7a258d3e339a53978fa24d9d4f13bfefbe6ed59c66365a7fb3aa778af7b8cd8191d07c80695c79133dd83c6ef7e13f45d6dd9abd780f18df17b6cf360520edd3dd66c07f245aa28e6ce2b1b09e1ccf5e0c681c67f7b13b9ac1c1d307ea803e4d342db002da0559fc178e24715298500e3f86d1511c4e480773020bb6f3779eafce0a9db64b7d722f1e5d10c5ad3b3697368e7caaa31684c60629d035e2ec41c8b98eba1ebbc4396cd26975107da93aa20b7e50dec3dbaede2e254a5d9ba701ddd3be13591f4a3798d2a987c0129ec6698acd44c524aba670ae4c5161790151f588ffb7df89d1f5d05f1e68815e59b65bf977de1bb4e5105a40b00cc0a87a1388652279bf3211eb51783c6a31ae53db08be8d6a7cf2c979bb4581d91bfb8518e5313f8b220e2f0b9e862425dac6390a4ab36209ad6c2d9aab251b1ab42fc7ee28734217818c78bd9c6e393d399793596f9547a4e056fa3859910eb378d027f5ac2250ef81145f5fcc378f6fe4bfb87e62073514ef88b36dd98b7e681a5995daae1d6080e139c168d737fb021dbead54a3ebdeea6f53a1b2bcc7c46046d0d2aa0e2322f062636a3f82fd8398a3669b29cd182f8bdb78722c7cf6308dd87e00a83a1db3059585f438a40edef401fcac195e2e642a1a263ff02d5709d2642e069be5bb2628f2e46c64eb83ebc575e658af2395eb97c4be4031f3fd3370d33e08971d9c5652ed536a26f893957be2dbab7f48406780c0f2d9a8301fabce4e29fd124c26d2f707ec2421c553b043d8c8c19ded62e64afbdd05a65a9b636cc010bd2a64b0d9e0fe0cfd0131381a389485f78652be8873c2c0d7837538e313be548bbec3852285d87aaa91b80bdeac028c9007b41af7ed55c76edf0366bf1a57ad8d4a104273c58e4c01d6aba1b7ed6ffb88ebb17bb81df8e052a0809e0731073eac81221aac5e0eca06202faf79850e539020b6764f8af8139f050144d08b833394e85dfad82255d0d26e33fb2aa1e070de0ee7b0ff0421e3cdfbaba61a85f7898b4bd768bc2a6587985f0e8a77cf7f9f54add27437d0dc1969227b055411a862281158a2500a5388e7ad146d6243fe8c68baa29bfd2526c8f248451ddde30799dd79530663c0a01b2a627ae9977be0dce066ad196b982bb392a4c001b521ccea2ac716dd2ac5d4ddc2e5f568f3e4cb29c70913dc9ee5a5e31d4741f144eae11ea97feb853837b5e4bc290bb19314b2022f947d50ff9f7891f465d749d4ea9787957548f39629fb84c30d65278c89d080a7c80d724c1121abd6ad0bb6cc6c1d27e9a15f039339aa71adef1eb9db30d8aa980c1679bf8ca508f26fb13e52f26526594c431765d0af57635b4c80a4b54b4bb206ef930fb7bb194ebbe9b263350b765b7c1c4831d03de35ca533a6b82844a4de3f27b6431b8e074a5516c2eabe90424962d0f5649a344658ec2ffeae0788338be539883e2b82c5a5549344eb4ac20f34a2d8659182ab1af196471411efefb3a32b97c7207de6d00b57c974bbfb99e778c611c3426e8c88187e28abd72b0815894e5d0274ef74150fb6d328e9d712d3c0d4a56a3f7c39000a15ead76d27b68c8df1b04315f93a9f8cfc38b77fe14ebf147bcb4047f78bacc3b9b9879dadb3691572d83f3e91f7012b1d98c8845c9a8dbb0c88d7534a1e2ead17e525ff50f204be3c6fe787660a72051317f1dd898554595b9148ff88075f9aba6b9fda557ef53e1d574b04cb980e3666b1fb9b0c62d885c24953588df3ccffea5d91afc33084521cf7c4563ac08083dd333ad7cf66e125f049d40441d5943769f49047f91230630fd910806cadd35b5a30f08a214b2d1bd9e001aa940c6533e95fcde6dbcba00e1c53d769b3666916ad4c61aa19696aff8a8453e185f58f2f09d231443b8afe955b4a49a42e77f5ba93738ccd7f8d2036e1f0ad1cc8685bb21424457ce8638b8e6360929f56453b485f33b8ca74b18405e0f82413b60454f1f7d5d02350ce2f15c19536e863ab1e4183cb6ea95a97de203c5ff2f5136fc9e720869cad5f866186dee917ccf92d3b75ff092a00d06fab7499c1982f3d4ab6ab00c4bb169f8bb4f8d6bc80d8682a0bb571f4408a71ed047a8700fd6500506b1b9b9e4e757b8d0a90833495648a39da79fba11a0dbcfb1a35b1109b0e00bc6e7f92970e6ba069fefd4c69f960a95ac7f3f8a84782ad2f7b8cb6173ee13fb4113e97eae5b5d57cfd33fb7cefb965ad5b111dabb2f2e242172c2a5495b7a7a6b30e4a440489eebe479a2730d77f7f9d3fd445dcccefd47dd4516640aee3d864d0e1da92219455a31915606a2ec8af9e1db055591f804ee7982e66d902254a7136d19f7355a8aa2864bfada818920a960fbccb7c91cbbd4846f53794d79564fbc38c7a3f9299a170212c7d3ed4e279287f80ca497063c02347463c4928940609275150c66651c76cfd9d34ecd79159ccd7b2e3b834ac554ea030b416f4785404edc56f0991fe3deaf28752b64f9f6c018b78b45412ab1ff94817296a97df72a8e6e25f21a07affb1a956a59897f10872b18197946487f104c35a8e8569817808f5726f8872acf1a25d88e3f12bfa894dea77f09385e218adf2cf8d5ec57dbd22ad357ebf4b862376a42413febad078383a9041752bd3e0dfe437e40b45295503c4a9d8d624b5f214e0d42a86d10b81bbc02b12db2c42ef72cef2f57204b2d504c20710134feb5beef5b4823e42c59ba387d42df12d7f020527ff43f199ae8789c5198efcb0cd56abdd923f7139061d5aa6670006fd1216d1b7031d2a5bad5ad4ea93a50fc668d74bb1bab6ded88ed9314186850980eb035b62de8558f09d95bececf98b3db957a745471c5eaff682362567180ddb2ec860c0b2ee755ab530f25f8ac0f41017221718017003127810cbe1ed5eb892270da9b2643184dc7d54bcf2db25652ab0413b5fd9a071f5dc1bb73be6776a002f48a062cd489e1662c4ae45976163f08f17f234e85f412b34fb7879ca8e688bcf8713dbc5544aefcbb8ce6a7dd274fe0cc4defdd20a1dd7bee742d07bd421058d1e56da196eb597800cf92ea6815f88101cfecb6ca6fd52b7a602025efa2d306322d730b101917e5ea7c5eb1d228327b1c2d49af5f201b71093bc76e0af64bec954b2afd43e2ee65117aee3c710921ab42c53fe7276d3bf2fb3b68854ffcb49005507f7a1883c8f412f01012e109eaa23b03780b00869deafb33a56b8a4c2a8f98ddb1798c06ad805463f6fed0a12367646ca728886dbc38248b8ea6b2f58fb4c19568c7bc5028d52d8a240f6fac51daf9ddd8285b3fffdf11921382017a9afef042c3e6b1b10b97b1d6a9392d6108ae40df7c9d7f9ad970c23dc66d0dda28da28eab73a67f08bf235f89e69fbca8703bcaa2a9451fdeca0053e3e684f619bc7d1d1113a6ba61b6ef3e769af6745c4bd5a8442f685981753f14eba1adafb9bdaa9afb2ac34192552d8ad0d65949eee6939a8d1a72f0ec3f86e22a6eef35754066bec0181835a6544c61d006136e12b01eeba2bff27dac3f9e6cd3b194f5c25748ac58422dc9971fec8000d7fa5533c9febf44623fc56c68e9fc687f440d22759b4403b675f02104c7284f8ceea86fcf7d644bb43a90d3fa39dbf0a5dfee79e458e3613ba35a2b96992f966124bb2bbe88c0d57137e8b28a7ae6edbba94792d3cee4540b6bdb4208d74d060e31ac556206974a735bcacb063bb243d1aca0b23f5244ceaab74c5462c8fe826626c5edb9b0baa6ace3aa9281cfee417744574fd07de47d07dbcafb5b1ebd45bf0be920c9feb97debb417b03dd1a67a5d1161758c93750a1277066fe339ed5a830211a048d59dcfe489056dc750a5049b65c2d5bd6ea776526ebde0b8f7544da7416433820545bc9323360d653b8e314cdb35739fce74c5bc2ea7142c4b989a7933f47ed2734677c5e82b1b4ec5ef825ed1288696ebd5eff564d144cb0faee885a2c735d33870dff8a977a73298849f303b53663823301320f368762411e8beb8b572082e10abe1d3b1771a5a4a50b8eb60ef052c148fb777fa7378f4b97ce81bcb47f2b68405650513d5baf2bc12a3beb2f3544eefe2afe333c6a2d04d7b2131dbbfd628851db757309310d6ab80e8ed967fc039d306462271e638e55a722f37710a75fe6e5b6703badac7ed7540f566d6b59910ce2af8e806c4d02b5b3b3a0d3422eb599a8b3fe10b259e7b0616532b60a59e42d78010766492c49027da8ba3570d3210881050bb724d87e10cda3bd19e5b20b19f1659624d84ecfca4b22828c03881494813a32d16af1d5341363a4829ecb2296d6f703b067b8049d996c5dba8c00e193179ef61e65110caad3a1dd7ba17089c92f889f72e50cbf393688bb39f4d048423c6ef059d9fa71590e59a53ad78ca50db68ed0f9d499607da4a27b24094b803eb58f2f73c66dc61f022fb2c29edbc8efa87bcdaf535d9811b0b9e926721c3d2b23a97e97307c1dcac3d21011f55a32e0be6595bb15b2aa90542e20da9c13e49faa8787e0b2470b3cc482dd87f04dd43e2c266d3defde39f3a7b4f27122c179fa8189e53b2d1cb0cde9f0ce7ade6623e9d6835f72e5f87677a897d7af04d5f4ffc7e2cf421f614947f6851d0fba6ddb0f505172b866da8a69e529a46babf251f6a1c010d7afdc2bea31f0f3a8935c415bf52251b34859356409cb93d59c93587c63c54fa407343d1efdd312a9d7e7e7cc0a7cb5e1ec609071ffae15e3cee990de14e8cac2e3bb50782c5b466e813edd3f9e9821eadb1ccf3ae2b5fcd482c4a3d96532dd63ab8985cf65da9f8dbc72aa4d9da4d56c88131ec10d8a79df45ec0f4fed97f65529d687105ba3cd9e5cd5ae602c65a8a52ea2cd3c56bf6d7732784b3daecba0ad2ccb674f9be2d42fcaeed52d8b22072f284192a2fb464f92072ba624948c87aa898ef9fb1de3a011b677a078157fbd21a55a2188700d0e8a7830ee75c55bf668b3f3533e7627713fab087335543a09eda59db6e06aea0c2da70a44c0b5d08d1064d5b1de694b870fb53cff34a620507d24b291ef9de2c435d758e5ea0fe343041d3019a6d", 0x1000}, {&(0x7f0000003440)="e3f80c0c07d7b3b88d05046aab7a808838d08f068c11633daba6", 0x1a}, {&(0x7f0000003480)="5acc80ba5d9f38233ab1d9311b375ab9abed749e6a5c35e69d1798ceca040e2ae97388bafa55b8ad078e3451bb0271f2bc3852b9e9e15c1dc93c34a7d94cdf262db062b4fcfa52ed87d1adb51d90fbda916edb27e9527eacf2ccf82afa00bcb95fbea44f3d775f1cc8fc575469d391bf21716ed7b5b2d8aacba95dd8cfe50a4c2be18de6dc00b5e90623bdaf821a0aab4f70a123de392d4219416fd9dc314e56a901f03e4bb219ceb5b071c2b5e93b75c97020d538f981dccdc2acc34b0ca7b634871fc6b8b4870f7231e6cee9ec969935bbcb9d13f3780ce8b6b8d99d5708bd06c6", 0xe2}, {&(0x7f0000003580)="b42cc7d6f5638fc93a7b23ea0fb7674347098a34cbd4aea19984d2fd4b7c2f1680850ca43de9ab544c46687ca1863fdf7c095524482bd7f3d9db79c8e676aa637f1b870bb94c1e622145aae326cc51ef821bf50102cea8948cf14e23e7d6d13765a203e9285bfab1e16bda088cec504d0adca1793400e96b2413c18ef856ee14bc4b682f107aa9f6eeaee8182c06d09a7b0eb24a9e3610ecc5c9ee68194c35015a8cb3f82272de0abbf6e2f4c8d6eba7d1ff8e696b755a17f420c5e829556f", 0xbf}, {&(0x7f0000003640)}], 0x9, &(0x7f0000003740)=[@sndrcv={0x30, 0x84, 0x1, {0x40000, 0x9, 0x2, 0x9, 0x100, 0x7, 0xc2b, 0x7ff}}, @init={0x18, 0x84, 0x0, {0x6, 0x81, 0xe039, 0xfffffffffffffff8}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x820a, 0x1, 0x3}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x5}}], 0x80, 0xd1f93b2646afabcb}], 0x4, 0x4000004)

23:09:05 executing program 0:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)=ANY=[@ANYBLOB="000700000100000000"])

23:09:05 executing program 3:
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x20000, 0x0)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
r1 = socket$kcm(0x2, 0x2, 0x73)
sendmmsg$unix(r1, &(0x7f0000001000)=[{&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f00000003c0)="02", 0x1}], 0x1}], 0x1, 0x0)

23:09:05 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x4000004)

23:09:06 executing program 1:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58)
vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000014c0)="18", 0x1}], 0x1, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
splice(r0, 0x0, r3, 0x0, 0x1ea71, 0x0)
close(r3)

23:09:06 executing program 0:
prctl$PR_GET_NO_NEW_PRIVS(0x27)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
r1 = getgid()
lchown(&(0x7f0000000000)='./file0\x00', r0, r1)
r2 = syz_open_dev$dri(&(0x7f0000001080)='/dev/dri/card#\x00', 0x1, 0x2)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x14051, r2, 0x0)

23:09:06 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x2000000802, 0x0)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12)
accept(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, &(0x7f0000000000)=0x80)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000140)={<r2=>0x0, 0x8001, 0x5, [0x9ec4, 0x4, 0x3ff, 0xf32, 0x7f]}, &(0x7f0000000180)=0x12)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000001c0)={r2, 0x3b, "37790e866acb37c9a4029c6ebd38caf37f11b4aaf88a5410e34d678350cce6a4e3dc5d567ae919dce3c5d8ea31b6c24c96f4c45abb5a7267c17134"}, &(0x7f0000000240)=0x43)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x10000, 0x0)
ioctl$SCSI_IOCTL_DOORUNLOCK(r4, 0x5381)
ioctl$KVM_ASSIGN_SET_INTX_MASK(r4, 0x4040aea4, &(0x7f0000000300)={0x7fff, 0x4, 0x1, 0x2, 0xee})
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000040)={{}, 'syz0\x00'})
write$uinput_user_dev(r0, &(0x7f0000001180)={'syz1\x00', {}, 0x12, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)

23:09:06 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)

23:09:06 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)={0xffffffffffffff9e, 0x28, 0x5, 0x0, 0x0, {0x3}, [@typed={0xc, 0x4, @u64}]}, 0x20}}, 0x0)

[  340.303406] input: syz1 as /devices/virtual/input/input5
23:09:06 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='maps\x00\xd0\x11\xd4m\x06\v)\x93\xf3m{\xcfB\x1e\xbe\tG\x16\xa8I@\xb0\xa4\xe8-\x12i\xca\xba\x03\x14\xecI\x99 \x01\xd1\xec\xd9q\xe3[\x03sP\xf3\x1d\xd6\x0f\xc5\x1eV\xf3\xa9\bRQ\x1e=\xd0\xb18~\x05\xc9U\xe8h5;\xf3<\xfc\x11\x04\xb7\xaf\xd55+\xc7=~G\xd1\x0e`\x99\xa3\xed\'\xd6\t\xb8F\x86\xb6\xf9\xb9\xd4k\x1f\xe2\x88k\x15\xaa\x86\xb4\x87\xb0\xf4\xe6\xdeQ\xff\xe6\xd1o&\xae5\xcb,9\x89\a\x88v\x12\xbd\xed 3%\xcf\x06\xe5\xbb/B^\x93f\xe9\x12\x00\xb2\xcd>\xbb6\xc7\xb2\xd85\x835U\x1fv{\xf9\xb9\xa5\x14\x97\xa9\x8b%9\xfd\x02\xe2s\xba-\x88\xad\xf8\x18*\xfd\xe6<MbD\xbd\xf5\xd8#\x1b\x04\xe3\xb6d\xf9/\xd8x\xc3E\xee\x87\xf0L\xb6\x88\xc2\xdd\xbd\x00\xf6p\x06\xd4y\xd0\x0f\xbd*\x9b\r<\x8e/=cH\xd6$\x15\xf7\x13\x94\xe1\xaf\x15\x15\x97\x02\x8b\xf5\x93\xf6m\xf6\xce\xe6Gs\xbc4P>gVZV\xca\xca\x1d\x961\a\xeba|\x8eE)j^\xf9\x12\x82\x82#x\x9bo`\f.\x17\xedj\xc3i\x1c\xd89q\xa0\xc4Z-CU\x93:\xc5\xde\xf1,Q\x95\xae\x0e[y\x8b\x90Q\xc0J\xd8\x00')
setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0xfffffffffffffffe, 0xfffffffffffffe83)
exit(0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x1ac)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000100)=0x1e)
dup3(r2, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)={0x85, 0x0, {0x3, 0x2, 0xfffffffffffffff8, 0x3, 0x5}})

[  340.386606] input: syz1 as /devices/virtual/input/input6
23:09:06 executing program 1:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
read(r0, &(0x7f0000000000)=""/58, 0x3d5)
ioctl$int_in(r0, 0x8000000000500e, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={<r1=>0x0}, &(0x7f00000000c0)=0xc)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000001c0)={{0x3, 0x5, 0x3, 0x933, 'syz0\x00', 0x10001}, 0x0, 0x1000050a, 0x1ff, r1, 0x6, 0xfffffffffffffff7, 'syz0\x00', &(0x7f0000000100)=['/dev/audio\x00', 'ppp1\x00', '\x00', '/dev/audio\x00', ',selinux(bdev\x00', '/dev/audio\x00'], 0x35, [], [0x6, 0x1, 0xbb, 0x9]})
readv(r0, &(0x7f0000000040)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1)

23:09:06 executing program 2 (fault-call:1 fault-nth:0):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)

23:09:06 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000))
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000000, 0x2, 0x1000)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000180)={0x0, r1})
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4000, 0x0)
r3 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x5, 0x103000)
linkat(r2, &(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000140)='./file0\x00', 0x1400)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r1})
dup3(r1, r0, 0x0)

23:09:06 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x80000001, 0x0, 0x1, 0x1d, 0x4, "f35bde9ca0488348746425dcde0d3202d382a9c4461d5b28ddcb8918e6b63ffea31ddd854a14cdecaff654fb208ce828d16a5ffda05e4c79371bdcf7a7ecbe20", "34c64e913169c9764b34f3c51713c2892956e42408e31ed67dbcda0a0bb1de5a5262ac78a7eb593fb9b4d55ed93b89488532c4363ba23663e7edb24b46578fad", "a35e6fb84a5f16f8b758cbf26c4ddb510456ed28c863c4cdd393245d1b5c7b9b", [0x4, 0x7fffffff]})

[  340.840097] mmap: syz-executor.3 (11808) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
23:09:07 executing program 2:
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000))
gettid()
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f00000000c0)='clear_refs\x00')
sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x0)

23:09:07 executing program 2:
r0 = fcntl$getown(0xffffffffffffff9c, 0x9)
r1 = syz_open_procfs(r0, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x0)

23:09:07 executing program 3:
unshare(0x20400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0xc})
r2 = dup(r0)
getsockopt$inet_tcp_buf(r2, 0x6, 0x21, &(0x7f00000000c0)=""/208, &(0x7f0000000040)=0xd0)
ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f00000004c0)={'bridge_slave_0\x00', 0x4})
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00')
sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfd7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x90)
r5 = socket$inet(0x10, 0x3, 0x40000000000010)
sendmsg(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="240000001d000303000000023da2830101faffffff86c436271d8568b51ba3a2d188737e", 0x24}], 0x1}, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000480)={0x0, 0xd62})
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000000000)={0x6, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}]})
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000026bd7000ffdbdf25080000002000020004000400080001000008080002002e0000005343378203a746241eee119ba2e64a54eef6320096a423be2933176a1ca58fcad2ab95b22adf0f122a08c3d61be7ff0700000000000007b7f85099483e113fd2c490eedc05004d6582dc8bb173ca6fc0e9664629c111f8be68a1cd6adbeda01cd6d74e2bad54aa923cbe98305de92b3fa1c9a33b6070ac78f2b43b17690c9d4d4a8931eca896f8bcd91292bebcba4ef7f0fa76ced946d8ea4c6d66732e774599b1c4183ff85329a3931aa75fb027e2"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x800)
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0)

23:09:07 executing program 1:
r0 = socket(0x110, 0x3, 0x1)
write(r0, &(0x7f0000000000)="1b0000004e001f09fff36d0f1188926da56e3b0841ef9407d6f900", 0x1b)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x1000)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1014400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x0, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20004000)

23:09:07 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000))
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)

[  341.229661] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
23:09:07 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x9, "4361c4e43ae794ce9e"}, &(0x7f00000000c0)=0x2d)
keyctl$session_to_parent(0x12)
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x1f, &(0x7f0000000000), &(0x7f0000000040)=0x4)
fadvise64(r0, 0x0, 0x4da, 0x0)

23:09:07 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000040)=0x5, 0x2db)

23:09:07 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x40, 0x208000)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000240)={r0})
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x10000, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
close(r0)

23:09:07 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000340)={0x4, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000000)={0x0, 0x2000000000, 0x1, &(0x7f0000000040)=0xfffffffffffff835})

23:09:07 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000000), 0x8)

23:09:07 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x8040, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x1012, r1, 0x0)
ioctl(r0, 0xc0984124, &(0x7f0000001f64))

23:09:07 executing program 3:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000b40)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x80002006})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x19418, 0x4)
epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0)

23:09:08 executing program 2:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000080))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000140)='cle\x85\x02\xe2\x00(j\xbaa')
sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000280)=ANY=[@ANYRES32=<r2=>0x0, @ANYBLOB="130000005d171df9ffffffffffffffe0000000000000001c6412115bf4677808dfee617788cc5cc68745148270e134d84c4bba563c7dd7a94bc9d01842dbf500a87148971edc5598908e47d50e6779fdf0ffb97af91fccbfd2fdba859ea78508c8065080c18c1f6f46f5a65a82eabac6988c526129f2a580a700b83a1fea2dabdeab840b1db103465cf4c320ce1b1acc99f8347d71fc9f6c89306e33f06b3f63101403fbed1182ccaef8e5387d730067b1c5b41d52322116ea24051e80dc87e6ec45a8e92021e8d6c7541aaa637663cc2d13b8df4861bfe6bdd8512de890330000000000000000"], &(0x7f00000001c0)=0x1b)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r2, 0x17a, 0x3f}, &(0x7f0000000240)=0xc)

23:09:08 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000440), 0xffffff81, &(0x7f00000004c0)={&(0x7f0000000040)=@ipv4_getnetconf={0x4c, 0x52, 0x306, 0x70bd2c, 0x25dfdbfc, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x1}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8000}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x81}, @NETCONFA_FORWARDING={0x8, 0x2, 0x7}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x6}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x40}]}, 0x4c}}, 0x0)

23:09:08 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x80, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000200)={{0xffffffffffffffff, 0x0, 0x8, 0x0, 0xffffffff00000000}, 0xfffffffffffffc00, 0x1, 0x42a1d335})
r2 = socket(0x22, 0x80002, 0x3)
r3 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)={{0x1, 0x0, 0x0, 0x0, 0x3ff}})
syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x2000, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x200, 0x0)
syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x6000, 0x0)
ioctl$KDGKBTYPE(r4, 0x4b33, 0x0)
dup2(r0, r2)

23:09:08 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r1 = gettid()
wait4(r1, &(0x7f0000000000), 0x80000004, &(0x7f0000000140))
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x301000, 0x0)
getsockopt$inet_tcp_int(r2, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000100))
ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000002c0))
getpgrp(r1)

[  342.128192] QAT: Invalid ioctl
23:09:08 executing program 3:
r0 = socket$inet6(0xa, 0x8000000001, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local}, 0xc)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0x9, &(0x7f0000000080)={@in6={{0xa, 0x4e24, 0x0, @mcast1}}, 0x0, 0x0, 0x0, "9c9964bd720998f321c12677db0277b420b5b35b6c83ecda5ae427ba6f6d9c6ca0afa6f5000000008de1d482e19c213ef15775ace9f33cbac2f28048ccfbc96b0a00000000018000"}, 0xd8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
dup3(r0, r1, 0x80000)

[  342.242933] QAT: Invalid ioctl
23:09:08 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x7, 0x1)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x88, @loopback, 0x4e21, 0x0, 'dh\x00', 0x0, 0x3ff, 0x7f}, 0x2c)
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)

23:09:08 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x353, 0x0)
r2 = perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000))
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0x8, 0x4, 0xb1ad, 0x7fffffff, 0x2, 0x100000001}, 0x80000000}, 0xa)

23:09:08 executing program 1:
r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x80040, 0x0)
open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
fcntl$setlease(r0, 0x400, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
close(r2)

23:09:08 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x20000)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0)

23:09:08 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r1=>0x0})
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @broadcast, r1}, 0xc)
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x6b, @rand_addr=0xd39, 0x4e20, 0x3, 'lblc\x00', 0x2, 0x5, 0x5d}, {@rand_addr=0x81, 0x4e23, 0x1, 0x1, 0xd18, 0x40}}, 0x44)

23:09:08 executing program 0:
socket$inet_udp(0x2, 0x2, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x80000101002, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40246608, &(0x7f0000000040)={0xffffffffffff0000, 0x7fff, 0x9, 0x2, 0x7, 0x9})
write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00'], 0x2)
close(r0)
shmctl$SHM_LOCK(0x0, 0xb)
mknod(&(0x7f0000000480)='./file0\x00', 0x1043, 0x0)

23:09:08 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
r1 = socket(0x848000000015, 0x805, 0x0)
getsockopt(r1, 0x114, 0x5, 0x0, &(0x7f0000000000)=0xeb29df614fb4d1b0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400, 0x0)

[  342.812654] hrtimer: interrupt took 33463 ns
23:09:08 executing program 1:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x280000, 0x0)
ftruncate(r0, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x2, <r1=>0x0, 0x10000, 0x6})
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000080)={<r2=>0x0, @in={{0x2, 0x4e22, @empty}}, [0x6, 0x4, 0x6, 0x1, 0xdf, 0xd2, 0x1, 0x7f, 0x3ff, 0xfffffffffffff801, 0x0, 0x60, 0x7f, 0x6, 0x2]}, &(0x7f0000000180)=0x100)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0xd2c}, 0x8)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000200)={0x9dcc, 0x6b, 0x9, 0x6, [], [], [], 0x7b496509, 0x4, 0x8, 0x10000, "965b5b16a94409f2da29d53071499f51"})
ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x10000, r1})

23:09:09 executing program 3:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000130007041dfffd946f610500070800005e00000000000000421ba3a20400ff7e", 0x24}], 0x10000000000001ee}, 0x0)

23:09:09 executing program 0:
request_key(&(0x7f00000001c0)='logon\x00', &(0x7f0000000000)={'syz'}, 0x0, 0xfffffffffffffffc)

23:09:09 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x18000)
ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000003c0)={0x30002, 0x0, [0x0, 0x8, 0x4, 0x5, 0x7, 0x2, 0x1, 0x1]})
getsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070")
r2 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x1, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xd3, 0x0)
close(r3)
write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000005c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000440)}}, 0x10)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000340)={0x53, 0xffffffffffffffff, 0x28, 0x94e, @scatter={0x1, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/49, 0x31}]}, &(0x7f00000001c0)="19193b5df46d4d53b20e57c82fb65af2bbe2c57213f3bda89e50363394df63d417a9ba28fde52f2d", &(0x7f0000000200)=""/219, 0x0, 0x3, 0x2, &(0x7f0000000300)})

23:09:09 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e20, @rand_addr=0x2f2b4531}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e23, @empty}, 0x80, 0x0, 0x0, 0x0, 0x10000, &(0x7f0000000000)='tunl0\x00', 0x400, 0xac5, 0x4})
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)

23:09:09 executing program 3:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x10000, 0x0)
ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x80000, 0x0, 0x8000}})

23:09:09 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x2, 0x6c6ebe43071b9122)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000400), &(0x7f0000000440)=0x4)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa0000000000400003000001000000000000002560b700fff0c30000000000000000000a00000006"])
r4 = syz_genetlink_get_family_id$team(&(0x7f00000004c0)='team\x00')
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r4, 0x108, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x10, &(0x7f0000000140)={&(0x7f0000000080)=""/85, 0x55, <r5=>0xffffffffffffffff}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r5, 0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x10800, 0x0)
ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000000)={0x100, 0x1})
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="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"])

23:09:09 executing program 1:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000640)={'vcan0\x00', <r1=>0x0})
connect(r0, &(0x7f0000000300)=@hci={0x1f, r1}, 0x2b)
sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9b5117f117e9a7f4"}}, 0x48}}, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0)
setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000180)={0x6, @broadcast, 0x4e20, 0x0, 'none\x00', 0x10, 0x3, 0x27}, 0x2c)
sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x1, 0xa77, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "712434898683e4b1dc4a24f8a4195961cd51c774e37f236d70e6439a5e16261a0f4a5a02eaa9af95646d8b8d88263e9a1ac10922d0057816ca9d08f6290c04a1"}}, 0x80}}, 0x0)
arch_prctl$ARCH_GET_CPUID(0x1011)

23:09:09 executing program 0:
r0 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x37, &(0x7f0000000040)=r0, 0x348)
sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000140)=@in6={0xa, 0x4e23}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1f1c98"], 0x10}, 0x14)

23:09:09 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
ioctl$TUNSETGROUP(r0, 0x400454ce, r1)
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
r2 = request_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='clear_refs\x00', 0xfffffffffffffffd)
r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$search(0xa, r2, &(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, r3)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000240)={0x0, 0x6d06})

23:09:09 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x106}}, 0xc9)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x2, @loopback}}}, 0x90)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x1, 0x0)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000140)=0x9)

23:09:09 executing program 0:
r0 = socket$inet6(0xa, 0x100000000000002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x200800000000001, &(0x7f0000000200)=0x1, 0xfde6)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x7, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e24, 0x1000000000000}, 0x1c)
sendto$inet6(r0, 0x0, 0x2be, 0x0, 0x0, 0xfd71)

23:09:09 executing program 2:
setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.SMACK64IPIN\x00', &(0x7f00000000c0)='net/softnet_stat\x00', 0x11, 0x2)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/softnet_stat\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)

23:09:09 executing program 3:
r0 = socket$kcm(0xa, 0x2, 0x11)
perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x19, &(0x7f0000000380), 0x4)
sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@in6={0xa, 0x4e22, 0x0, @loopback={0xffffff7f00000000}}, 0x80, &(0x7f00000001c0), 0x2ab, &(0x7f0000000680)}, 0x0)
recvmsg(r0, &(0x7f0000000000)={&(0x7f0000000840)=@l2, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000440)=""/122, 0xfffffffffffffea1}, 0x2061)

23:09:10 executing program 1:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x2, @pix_mp})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2000, 0x0)
syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x40)
ioctl$BLKRRPART(r1, 0x1265, 0x0)

23:09:10 executing program 0:
r0 = socket$inet6(0xa, 0x100000000000002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x200800000000001, &(0x7f0000000200)=0x1, 0xfde6)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x7, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e24, 0x1000000000000}, 0x1c)
sendto$inet6(r0, 0x0, 0x2be, 0x0, 0x0, 0xfd71)

23:09:10 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x101000)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a})
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000100)={&(0x7f0000ffa000/0x3000)=nil, 0xa0, 0x2, 0xe3, &(0x7f0000ffb000/0x1000)=nil, 0x10000})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

23:09:10 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4)

[  344.186698] input: syz0 as /devices/virtual/input/input7
23:09:10 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x0, 0x35, r0, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0)
readv(r1, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x77)

[  344.257290] input: syz0 as /devices/virtual/input/input8
23:09:10 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x1)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6)
syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x560f, 0x8800)
socket$unix(0x1, 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000140)=""/207)

23:09:10 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x40000)

23:09:10 executing program 3:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x77359400}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f00000000c0)=0x6, 0x4)
recvmsg(r0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=""/93, 0x5d}, 0x0)
setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000100), 0x4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)

23:09:10 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = memfd_create(&(0x7f0000000140)='md5sumbdev.vmnet1lo\x00', 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
chroot(&(0x7f0000000040)='./file0\x00')
pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0)
r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2)
write$P9_ROPEN(r2, &(0x7f0000000100)={0x18, 0x71, 0x2, {{0x40, 0x2, 0x6}, 0x5}}, 0x18)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0)
chdir(&(0x7f0000000780)='./file0\x00')
symlink(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00')
mount(0x0, &(0x7f0000000400)='./file0/../file0/file0/../file0\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x4)

23:09:10 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000))
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)

23:09:10 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000000)={'gre0\x00', @ifru_addrs=@in={0x2, 0x4e20}})
r2 = dup(r0)
ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5)

[  344.684074] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it!
23:09:10 executing program 3:
unshare(0x8000400)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x100)
getsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f00000000c0)=""/66, &(0x7f0000000040)=0x42)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

23:09:10 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000000))

23:09:11 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000002)
setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0xfffffffffffffffe, 0x4)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffea6)

23:09:11 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070")
r1 = socket$inet(0x10, 0x10000000003, 0xc)
sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07121dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x400)
setsockopt$inet6_udp_int(r2, 0x11, 0x6f, &(0x7f00000000c0)=0x800, 0x4)

23:09:11 executing program 2:
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000000)='ne\t\xafrfkomm\x00')
sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x0)

[  345.122924] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
23:09:11 executing program 3:
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0585605, &(0x7f0000000080))

[  345.180274] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
23:09:11 executing program 1:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x0)
r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x36fb6c3d, 0x22000)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000100)={0x584, r2, 0x300, 0x70bd2d, 0x21dfdbfc, {}, [@TIPC_NLA_LINK={0x158, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffffed}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2008}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5051}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffe00}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1455c326}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7335}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x483}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xf8, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xff, @remote, 0x800}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x224}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6gre0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7fff, @ipv4={[], [], @empty}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x31ab}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_BEARER={0x98, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @rand_addr="5f5532412d6c84a2bb8874676d4c6c2e", 0x200}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0x88, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}]}, @TIPC_NLA_LINK={0x3c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}]}, @TIPC_NLA_BEARER={0xbc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1ff, @remote, 0xfff}}}}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x24}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}]}, 0x584}}, 0x40480c0)

23:09:11 executing program 2:
r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7c00000000000, 0x80)
connect$caif(r0, &(0x7f0000000040), 0x18)
accept$unix(r0, 0x0, &(0x7f0000000080))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x0)

23:09:11 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x3f, 0x80)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f00000000c0))
clock_gettime(0x0, &(0x7f0000000140)={<r1=>0x0, <r2=>0x0})
futex(&(0x7f0000000000), 0x9, 0x2, &(0x7f00000001c0)={r1, r2+30000000}, &(0x7f0000000200), 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x800, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x13f, 0x9}}, 0x20)

23:09:11 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x265, 0x0)

23:09:11 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070")
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x902, 0x0)
ioctl$TIOCNOTTY(r1, 0x5422)
r2 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0)
lookup_dcookie(0x8, &(0x7f00000000c0)=""/182, 0xb6)
socket$inet6(0xa, 0x7, 0x80000001)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14)
ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000000)={0x0, 0x1, 0x0, [], &(0x7f0000000040)={0x98f905, 0x1000, [], @ptr=0x740000}})

23:09:11 executing program 2:
fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000080)={0x0, <r0=>0x0})
r1 = syz_open_procfs(r0, &(0x7f0000000300)='clear_refs\x00')
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000040))
sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x3fff)
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000000)="0000000000000001000000")

23:09:11 executing program 3:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="304ba5989b53062550b805b8cd86dc7c270a27b70930388a5a902311f0558b6deac5afd8aae0466c66203332c0e520f1c5dda706bc20764ef36e8990fd560115847f4665c22eb1368a"], 0x1, 0x0)
msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x1, 0x0)
msgctl$IPC_RMID(r0, 0x0)

23:09:11 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0x3a, "6d7897a60606494e20324b508e10737128608002f68b6b2aca15ed622f7b0ad88dfe67305642f5913dd887d3adec4bf1731b91c5054b8bcf4842"}, &(0x7f00000000c0)=0xba)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={<r1=>0x0}, &(0x7f0000000140)=0x8)
r2 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000180)=0x1c, 0x0)
setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000200), 0xfffffffffffffea6)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={r1, 0x0, 0x23}, 0xc)

23:09:12 executing program 0:
process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000002040)=""/224, 0xe0}], 0x1, 0x0)
r0 = socket(0x10, 0x803, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x8, 0x8, 0xaa8}, 0x14)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000900)=""/124, 0x7c}, {&(0x7f0000000d00)=""/226, 0xe2}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400})

23:09:12 executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x40000007fff, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x1fffd, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000440)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000580)=0xe8)
r4 = getuid()
stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, <r6=>0x0}, &(0x7f00000006c0)=0xc)
getresgid(&(0x7f0000000700)=<r7=>0x0, &(0x7f0000000740), &(0x7f0000000780))
fsetxattr$system_posix_acl(r0, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f00000007c0)={{}, {0x1, 0x3}, [{0x2, 0x4, r2}, {0x2, 0x5, r3}, {0x2, 0x4, r4}, {0x2, 0x7, r5}], {0x4, 0x4}, [{0x8, 0x6, r6}, {0x8, 0x2, r7}], {0x10, 0x271da84b3ca96169}, {0x20, 0x4}}, 0x54, 0x1)
ioctl$TCSBRKP(r1, 0x5425, 0x1)
ioctl$BLKBSZSET(r0, 0x40081271, 0x0)
r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0)
getsockopt$inet_mreqsrc(r8, 0x0, 0x2f, &(0x7f0000000300)={@rand_addr, @loopback, @broadcast}, &(0x7f00000002c0)=0xc)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'bcsf0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f00000001c0)={r9, 0x1, 0x6, @random="744dc23cb1c9"}, 0x10)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={<r10=>0x0, 0x4}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000100)={0x9, 0x204, 0x81, 0x100000001, r10}, &(0x7f0000000140)=0x10)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r8, 0x800442d3, &(0x7f0000000240)={0x0, 0x800, 0x0, @dev={[], 0xe}, 'team_slave_0\x00'})

23:09:12 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='7:2\t'], 0x4)
r2 = dup3(r0, r1, 0x80000)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vcan0\x00', r3})

23:09:12 executing program 2:
getpgid(0xffffffffffffffff)
r0 = gettid()
r1 = syz_open_procfs(r0, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x4000, 0x1})

23:09:12 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
r1 = dup3(r0, r0, 0x80000)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000200)={{0x9, 0x7, 0xffffffffffffffb2, 0x8, 0x6, 0x101}, 0x7, 0x0, 0x6, 0x1000, 0x5, "9a4e18377ee42202ef669c3e037bba35b93aa2c0f7acd5ec2e34156f4fdb374ee6f06f5620610459998f9305053a5290e637f640a75f3cdad84b9dfffb8c31550a88bcb68e3b96b716d201978177c0c2b2abab125b7d925f8bd71541a05629398f181cb8c3485447ce808ef4b7f6a004f99d17afacbc5108d34439ecc4cedaab"})
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x6, 0x6, 0xf, 0x13, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e20}, @sadb_x_policy={0x8, 0x12, 0x4, 0x2, 0x0, 0x6e6bba, 0x1, {0x6, 0x7f, 0x200, 0xfffffffffffffffc, 0x0, 0xdda, 0x0, @in6=@loopback, @in6=@mcast1}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e24, @empty}}, @sadb_address={0x3, 0x6, 0x32, 0x20, 0x0, @in={0x2, 0x4e21, @rand_addr=0x7}}]}, 0x98}}, 0x4000000)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000003c0)={0x7d, 0x0, [0x9, 0x2, 0x4, 0x1000]})
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0)
sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="020b00000300000000000000000000000100090003d96d60"], 0x18}}, 0x0)

23:09:12 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x90, &(0x7f00000000c0), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffbfffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4)
getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)

23:09:12 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070")
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r1, 0xfffffffffffffffd)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa)
r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000080)={0x0, @reserved})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000240)={0x100000001, 0x1641, 0x7fffffff, 'queue1\x00', 0x10001})
syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0xa3c6, 0x8200)
membarrier(0x4, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x1, 0x20001)
ioctl$KDGKBLED(r3, 0x4b64, &(0x7f00000001c0))
close(r1)

23:09:12 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x4ad, 0x4003)

[  346.470096] kernel msg: ebtables bug: please report to author: bad policy
[  346.558982] kernel msg: ebtables bug: please report to author: bad policy
23:09:12 executing program 0:
r0 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x205, 0x8000000100079)
ioctl$KVM_CREATE_VCPU(r0, 0x41045508, 0x0)
ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000000)={0x3, 0x3, 0x20})

23:09:12 executing program 1:
r0 = socket$pptp(0x18, 0x1, 0x2)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x0, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x7, 0x4, 0x468, 0x248, 0x118, 0x248, 0x380, 0x380, 0x380, 0x4, &(0x7f0000000140), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3, 0x80000001, 0x1}}}, {{@uncond, 0xf0, 0x130}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "e7959490463bc89b8f64bd3e69292a8d943b563d5a01598ff1372389244d"}}, {{@uncond, 0xf0, 0x138}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100, 'syz0\x00', 0x9}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4b8)
r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x41)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x900000}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={0x14, r3, 0x0, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x7fd}, 0x4004010)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000001a40)=""/225, &(0x7f0000001b40)=0xe1)

23:09:12 executing program 3:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x0, 0x0)
unshare(0x20400)
ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x7, @media='eth\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

23:09:12 executing program 2:
r0 = gettid()
sched_rr_get_interval(r0, &(0x7f0000000000))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1)
sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x0)

23:09:13 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
prctl$PR_CAPBSET_DROP(0x18, 0x19)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@loopback={0xff00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x1}, 0x20)

23:09:13 executing program 3:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x80})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
r1 = gettid()
process_vm_writev(r1, &(0x7f00000002c0)=[{&(0x7f000034afa4)=""/1, 0xffffffffffffffee}], 0x140, &(0x7f0000000040)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1000000000000273, 0x0)

23:09:13 executing program 1:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x5)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x80, 0x0)
ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000080))
r2 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
rmdir(&(0x7f00000000c0)='./file0\x00')

23:09:13 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x1, &(0x7f00000006c0)=""/222, &(0x7f00000003c0)=""/245, &(0x7f0000000200)=""/218, 0xd002})

23:09:13 executing program 4:
io_setup(0x0, &(0x7f0000000000)=<r0=>0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
io_getevents(r0, 0x8, 0x1, &(0x7f0000000040)=[{}], &(0x7f00000000c0)={r1, r2+10000000})
pipe2(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4800)
ioctl$VT_GETSTATE(r4, 0x5603, &(0x7f0000000140)={0x100000001, 0x100000001, 0x4})
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getnetconf={0x14, 0x52, 0x410, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4008054)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00000002c0)={0x101}, 0x4)
clock_gettime(0x0, &(0x7f0000000380)={<r5=>0x0, <r6=>0x0})
io_pgetevents(r0, 0x1f2, 0x4, &(0x7f0000000300)=[{}, {}, {}, {}], &(0x7f00000003c0)={r5, r6+10000000}, &(0x7f0000000440)={&(0x7f0000000400)={0x800}, 0x8})
sysfs$3(0x3)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000480), 0x4)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000004c0)={<r7=>0x0, 0x35, "f9fa20e11266666c1ff9c7bcb3980021acff281cef05066f122a55b10f97a296ba933422835811bf32a0c8fc4dc0c409fb24e65e4e"}, &(0x7f0000000500)=0x3d)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000540)={r7, 0x2}, 0x8)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000580)=<r8=>0x0)
sched_rr_get_interval(r8, &(0x7f00000005c0))
write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000780)={0xc, 0x8, 0xfa00, {&(0x7f0000000600)}}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@empty, @in6=@local}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f00000008c0)=0xe8)
ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000940)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e22, @rand_addr=0x5}, {0x2, 0x4e24, @local}, 0x4, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000900)='vcan0\x00', 0x1000, 0xffff, 0x100000001})
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000009c0)={r7, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}}}, 0x84)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000a80)='NET_DM\x00')
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000ac0), 0x4)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000b00)={<r9=>r7, @in={{0x2, 0x4e23, @rand_addr=0x9}}, 0xca1a, 0x5, 0xa9, 0x9b, 0x2}, &(0x7f0000000bc0)=0x98)
ioctl$CAPI_REGISTER(r3, 0x400c4301, &(0x7f0000000c00)={0x8, 0x8001, 0x1})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000c40)=[@in6={0xa, 0x4e22, 0x3ff, @ipv4={[], [], @rand_addr=0x9}, 0xdfaa}, @in={0x2, 0x4e22, @broadcast}], 0x2c)
set_mempolicy(0x4000, &(0x7f0000000c80), 0xff)
r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000d00)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x810000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, r10, 0x800, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x80000001]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000e00)=0x1, 0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000e40)={r9, 0x401, 0x30, 0x8, 0x7}, &(0x7f0000000e80)=0x18)

23:09:13 executing program 3:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x9af, 0x2)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000100))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000440)=0xd)
setitimer(0x2, &(0x7f0000000000)={{0x77359400}, {0x0, 0x2710}}, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c961deb25a000059ca592c2e874aa5c2c79bca142e29e9999afe7bed70b79ce7e10d5af7d4c77e320a1808e686f25779fbb7a5c9121501718e5b10848dbec0dea9000000", @ANYRES16=r1, @ANYBLOB="0c0e27bd7000fedbdf250a00000008000600ff7f0000"], 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x40000)
setitimer(0x2, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
ioctl$TCSBRK(r0, 0x5409, 0xffffffff)
ioctl$RTC_VL_CLR(r0, 0x7014)
accept$packet(r0, 0x0, &(0x7f0000000480))
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='z@\x00\x00', @ANYRES16=r2, @ANYBLOB="000825bd7000ffdbdf251600000008000600040002008c000100380004001400010002004e20000000000000000000000000200002000a004e2300000005ff0200000000000000000000000000010000000038000400200001000a004e23000000047b53c50cdbd0684c3cd744e58101595fffffffff1400020002004e23ac1414aa0000000000000000100001006574683a69703667726530000800030001000000"], 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x80)

23:09:13 executing program 0:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0)
r0 = socket$inet(0x2, 0x6, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0xa}, 0x90)
setsockopt(r0, 0x4, 0x40, &(0x7f0000000140)="5f1caeb7fe7c5fca51e25f5942e214aef8d89473008788c95099f46b0b1d7bb21247f943394cb191e20efb627f9b68c59889442be588622623b4fa789cd64c62c17b4743f4f64e097992c2ec3e0a43f9dfddfd248a7f44e2cb5a4b7f97753205493f02be9e299965c6524f33ead66a4b703212135576f4649a59b18cf25ff1812ca9e974f8a889a9da01723a37f292481f38d03a133faa773c4f2f8c5a2162bef7aa9282d9b5dd140bad97571a", 0xfffffffffffffd9e)

23:09:13 executing program 2:
getpgid(0xffffffffffffffff)
r0 = gettid()
r1 = syz_open_procfs(r0, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r1, 0x0, 0x19a, 0x0)

23:09:13 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f)
r4 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x6, 0x240)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x20011, r4, 0x0)
ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, 0x0)
setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000080)=@int=0x1, 0x4)

23:09:13 executing program 0:
r0 = open(&(0x7f0000000000)='.\x00', 0x200000, 0x0)
unshare(0x8000400)
fremovexattr(r0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000040)={0x0, 0x0, [0x100000000, 0x10000, 0x3f, 0x5, 0x6, 0x1, 0xf86, 0x8]})
sendfile(r0, r0, &(0x7f00000000c0), 0x7f)

23:09:13 executing program 3:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="24000000180016041dfffd946f610500020081001f000005b176188acc9bcd0400ef0008", 0x24}], 0x1, 0x0, 0xbc}, 0x1)

23:09:13 executing program 2:
r0 = getpgrp(0xffffffffffffffff)
process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/163, 0xa3}, {&(0x7f00000000c0)=""/95, 0x5f}, {&(0x7f0000000140)=""/199, 0xc7}, {&(0x7f0000000340)=""/195, 0xc3}], 0x4, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/64, 0x40}, {&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f0000000500)=""/221, 0xdd}, {&(0x7f0000000600)=""/166, 0xa6}, {&(0x7f00000006c0)=""/71, 0x47}, {&(0x7f00000002c0)=""/43, 0x2b}, {&(0x7f0000000740)=""/12, 0xc}, {&(0x7f0000000780)=""/10, 0xa}], 0x8, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r1, 0x0, 0x8c, 0x0)

23:09:14 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280))
socketpair$unix(0x1, 0x40000001, 0x0, &(0x7f00000002c0))
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000300)={0x401, 0x2, {0x1, 0x0, 0x1, 0x0, 0x9}})
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x400140, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x10001, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x13)
ioctl$SIOCSIFHWADDR(r2, 0x89fb, &(0x7f0000000180)={'bridge_slave_1\x00', @dev={[], 0xb}})
syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x97, 0x40080)
r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x2000, 0x0)
ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000200)=0x78)
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000040)={0x3, 0x200})

23:09:14 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000001200)={0x28, 0x2, 0x0, {0x2, 0x6, 0x1}}, 0x28)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000006, 0x80011, r2, 0x0)
sendto(r0, &(0x7f00000000c0)='E', 0x1, 0x0, 0x0, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000080)=@v2, 0x14, 0x0)
ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000000))
read$FUSE(r4, &(0x7f0000000140), 0x1000)
ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f0000001140)={0x0, 0x0, [], @raw_data=[0xffffffffffffff81, 0x3ff, 0x3, 0x3, 0x9, 0xded3, 0x8, 0x9, 0x401, 0xad, 0x100000000, 0x1, 0x1, 0x3f, 0x0, 0x5, 0x8, 0x400, 0x7, 0x8001, 0x51, 0xd4e8, 0x1, 0xffffffffffffffdc, 0x2, 0x8, 0x4, 0x8000, 0x1, 0x0, 0x864c, 0x6]})

23:09:14 executing program 0:
r0 = socket$inet6(0xa, 0xffffffffffffffff, 0x100000001)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000000)=0x68)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f00000000c0)=@ethtool_gstrings={0x1b, 0x1}})
r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000180)={{0x200, 0x3}, 'port0\x00', 0x0, 0x2, 0x8, 0x8, 0x2, 0xfffffffffffffffe, 0xffffffffffff0000, 0x0, 0x2, 0x9})

23:09:14 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x2d584833658bda76, 0x4000)

[  348.345412] IPVS: ftp: loaded support on port[0] = 21
[  348.700586] chnl_net:caif_netlink_parms(): no params data found
[  348.784872] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.791421] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.799987] device bridge_slave_0 entered promiscuous mode
[  348.812961] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.819477] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.828078] device bridge_slave_1 entered promiscuous mode
[  348.863685] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  348.875594] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  348.912951] team0: Port device team_slave_0 added
[  348.924424] team0: Port device team_slave_1 added
[  349.107198] device hsr_slave_0 entered promiscuous mode
[  349.222576] device hsr_slave_1 entered promiscuous mode
[  349.406207] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.412819] bridge0: port 2(bridge_slave_1) entered forwarding state
[  349.419998] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.426626] bridge0: port 1(bridge_slave_0) entered forwarding state
[  349.514164] 8021q: adding VLAN 0 to HW filter on device bond0
[  349.538680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  349.548250] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.560354] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.571602] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  349.597162] 8021q: adding VLAN 0 to HW filter on device team0
[  349.618275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  349.627099] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.633690] bridge0: port 1(bridge_slave_0) entered forwarding state
[  349.688897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  349.697224] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.703804] bridge0: port 2(bridge_slave_1) entered forwarding state
[  349.714947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  349.724264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  349.734942] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  349.751495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  349.759980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  349.778249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  349.790497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  349.802221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  349.810499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  349.862337] 8021q: adding VLAN 0 to HW filter on device batadv0
23:09:16 executing program 4:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x40, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
unshare(0x400)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000340)={0x4, <r1=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000140)={0x0, 0x2000000001, 0x1, 0x0})

23:09:16 executing program 1:
r0 = socket$inet(0x2, 0x200000002, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101040, 0x0)
ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f00000000c0)=""/61)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000001c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="e01400000009964d75c1180c7d620d00"], 0x10)

23:09:16 executing program 0:
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000180)=0xfffffffffffffceb)
r1 = socket$kcm(0x10, 0x800000000002, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000001c0)={0x5, {{0xa, 0x4e21, 0x1000, @mcast1, 0xfffffffffffffff8}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x81, @ipv4={[], [], @loopback}, 0x400}}]}, 0x110)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff50, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000018008100e09e5ddb3beef30f80ecdb4cb904024865160b0000cec8e5056870f8b2a700d4126efb120001", 0x2e}], 0x1, &(0x7f0000000080)}, 0x0)

23:09:16 executing program 2:
ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000300)='clear_refs\x00')
ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000380)=""/88)
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x41810, r1, 0x180000000)
sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x2)
r2 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000000c0)=r0)
setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000008}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00001000000000009ae4ff66a0387591813491c30e4197f434e9124ef955093f191a6b523008c1e0eb03828e294bc9fb8d714debde89c99914c9675165b220f899b2f814bab83b08abdd32251c7b09ed5f83783fc304c289510024943036255a72990d085731ac1c3e87f65639c9618b890e6fc8437d48bad4712103dbea153597b63e2d93a4248d19f590588cbaa7072c13e5411f29f9385564f2a7609eda874f29774fdf0f09c53aa6a4070ff11761c19b16fe2d8fe349b16b15eb80e8105f15338a811dc599867f5958d1a6d7d5909ee3858a297b06ceac69d0005f", @ANYRES16=r3, @ANYBLOB="04002bbd7000fddbdf250400000008000600010000000800050002000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000811)

23:09:16 executing program 3:
r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x7, 0x0)
r1 = eventfd(0x401)
r2 = semget$private(0x0, 0x4, 0x10e)
semctl$GETPID(r2, 0x1, 0xb, &(0x7f0000000180)=""/132)
poll(&(0x7f00000000c0)=[{r0, 0x2029}], 0x1, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
io_setup(0x7, &(0x7f0000000140)=<r5=>0x0)
close(r1)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612)
io_submit(r5, 0x1, &(0x7f0000000600)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}])
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x80000000)

23:09:16 executing program 2:
r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x20000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x9, 0xf45, 0xffff, 0x21, 0xffffffffffffff9c, 0x8}, 0x2c)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x8000000e})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0)
ioctl$KDSETLED(r2, 0x4b32, 0x8001)

23:09:16 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'lo\x00\n\xcc\x00\x00\x00\x00\x00\xd8\x00\x00\x00&\x00', {0x2, 0x0, @rand_addr=0xfffffffffffffffe}})
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@loopback, @dev={0xac, 0x14, 0x14, 0x2b}, 0x0, 0x3, [@multicast2, @empty, @broadcast]}, 0x1c)

23:09:16 executing program 0:
unshare(0x400)
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x80200)
ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000040)=0x3)
mq_notify(r0, 0x0)

23:09:16 executing program 1:
openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
sched_setaffinity(0x0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x200000, 0x0}, &(0x7f0000000200)="5f39203a1ec6", 0x0, 0x0, 0x0, 0x0, 0x0})
getpid()
ptrace(0xffffffffffffffff, 0x0)

23:09:16 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000100)="e0473cc28cbc870319a23108295dc9a3", 0x10)
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x2000000, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
symlink(&(0x7f0000000140)='.\x00', &(0x7f0000000440)='./file0\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x80000000002)
fchdir(r0)

23:09:16 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
ioctl$FICLONE(r0, 0x40049409, r0)

23:09:16 executing program 1:
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x2a0180, 0x0)
ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000000c0)=0x8)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x24000, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x3)
r2 = shmget(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
shmat(r2, &(0x7f0000ffc000/0x1000)=nil, 0x4000)

23:09:16 executing program 4:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x80000000, 0x4)
prctl$PR_SET_UNALIGN(0x6, 0x2)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x20000, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@dev}}}, &(0x7f0000000240)=0xe8)
ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000280)={@dev={0xfe, 0x80, [], 0xe}, 0x50, r2})

23:09:16 executing program 0:
clock_gettime(0x0, &(0x7f0000003140))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@dellink={0x28, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)
memfd_create(0x0, 0x4)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000)=0x80, 0x4)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

23:09:17 executing program 3:
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac"], 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000540)=""/197, &(0x7f0000000400)=0xc5)

23:09:17 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_names\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
fgetxattr(r0, &(0x7f0000000000)=@random={'system.', 'clear_refs\x00'}, &(0x7f0000000040)=""/15, 0xf)

23:09:17 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f00000001c0)={0x7, 0x4, 0x100, 'queue1\x00', 0x7ff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x3ff)
ioctl$NBD_SET_SOCK(r1, 0xab00, r1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000015002508000000000000000002000000", @ANYRES32=r2, @ANYBLOB="080002ed8bb31708006d00000000005a00ac1414aa7ca8e2e783eca4c315db3a3c8496fdddf817f9c0629551acaecf7540259af62a7bb557e58b71cef0aa14a405089163aa1c170fc264e19ce2db4c7a17d49632519ee505ebf9a1b0b7e16fa9c794bb38ad4cab7563da589a8901e4f7a17f6eb81982c503809629f49f9562f952ff090fb191f38ba8ef4e9f408814"], 0x20}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

23:09:17 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'os2.', 'mslos\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f0000000380)=ANY=[], &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000003c0))
mount(&(0x7f0000000380)=ANY=[], &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f0000000140)='selinuxselinuxGPL.vmnet0nodev\x00')
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000000180)='gfs2meta\x00', 0x3080, &(0x7f0000000200))
umount2(&(0x7f0000000100)='./file0\x00', 0x5)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x101001, 0x0)
faccessat(r1, &(0x7f0000000400)='./file0\x00', 0x2a, 0x1000)
mount(&(0x7f0000000100), &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000002c0))
mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='cgroup2\x00', 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x8)

23:09:17 executing program 3:
creat(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, 'fd'}, {0x20, 'trusted'}, {0x20, '-ppp1vmnet0(vmnet1user\'trusted)%'}, {0x20, 'fd'}, {0x20, 'group_id'}, {}, {}, {0x20, '.nodevlo\x00'}]}, 0x4f)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000a, 0x150, r0, 0x0)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

23:09:17 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
write$P9_RVERSION(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1501000065ff3030302e0700010000000010007b00"], 0x15)
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x1)

23:09:17 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000000)={0x8, 0x9, 0x8001, 'queue1\x00', 0xfffffffffffffff9})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={0x0, <r1=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={<r2=>0x0, 0x80000, r0})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={r1, r2, 0x4})
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f00000000c0))
sendmmsg$inet_sctp(r0, 0x0, 0xc9, 0x1000002000000)

23:09:17 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1f, 0x40)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000000c0))
write$P9_RREADLINK(r1, &(0x7f0000000100)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
r2 = inotify_add_watch(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x402)
inotify_rm_watch(r1, r2)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={<r3=>0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x4, 0x9, 0x4, 0x4, 0x70}, &(0x7f0000000200)=0x98)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e21, 0x7, @remote, 0x40}}, 0x2, 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000300)=0x98)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f0000000080)={0x100000011, @dev, 0x0, 0x0, 'wrr\x00'}, 0x2c)
fanotify_init(0x9, 0x800)

23:09:17 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000000))

23:09:18 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0)
getpeername$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhci\x00', 0x0)
ppoll(&(0x7f00000000c0)=[{r2, 0x2541}, {r2}, {r0}], 0x3, 0x0, 0x0, 0x0)

23:09:18 executing program 1:
socketpair$unix(0x1, 0x100000000003, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0xfd02}}, &(0x7f0000000080)='GPL\x00', 0x401, 0x1000, &(0x7f000062b000)=""/4096}, 0x48)

23:09:18 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0x1f)
sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000240)=@nfc={0x27, 0x1}, 0x1d5, 0x0}}, {{&(0x7f0000000080)=@vsock, 0xc, 0x0}}], 0x2, 0x0)
r1 = syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x10000, 0x4000)
write$P9_RSTAT(r1, &(0x7f0000000400)={0x76, 0x7d, 0x1, {0x0, 0xfeba, 0x7, 0x100000000, {0x4, 0x2, 0x3}, 0x89200000, 0x9, 0x400, 0x7fffffff, 0x0, '', 0xc, '\xd6trustedGPL.', 0x22, 'em&cpusEt\x00\x00\x00\x00\x00\x00\x00\xeb\xbeW\x0f[\xa4\xca\xa0\f\x8f\x94\xfaN\x04l1z\xbe', 0xe, '/wlan0userppp1'}}, 0x76)
setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x2)
r2 = syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x7, 0x0)
ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000300))

23:09:18 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000000)="153ac9d3a5cc0e743d20ddd9b7e971c7b53a503a4ee0d402ddfef108d4ae5f146f23b53112e28eb8cc934f9d9a02a95d3eea48b56e976ac443810d13939e05e3bfc654ed054a276be537836123b2f81ee62f38764f901f9f881f1d0ba4233954848cfedf931809b09b666dfb7c27d5c7e30df67e77930e89414a8410e5e5085c160e150b4b68a5eb6ad8ad360219bb4a412eab47", 0x94)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x6100})

23:09:18 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x101, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000340)={0x0, 0x0, 0x1ff, 'queue1\x00'})
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x40000, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f00000002c0)={0x1, 0x1})
r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x80000, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00')
sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x22, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'eth', 0x3a, 'veth1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20040000)

23:09:18 executing program 4:
r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7, 0x100)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x3, [0x2, 0x99a7, 0x4]}, &(0x7f0000000100)=0xa)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x1}, 0x38)
accept(r0, &(0x7f0000000140)=@isdn, &(0x7f00000001c0)=0x80)

23:09:18 executing program 1:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x1000, 0xd0000)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f00000012c0)={0x251a5d3d, 0x7})
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000040)={0x0, 0x100000001, 0x0, [], &(0x7f0000000000)={0x98f905, 0x3, [], @ptr=0x70a000}})
r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000140)={r1, 0x1, 0x4}, &(0x7f0000001300)=ANY=[@ANYBLOB="656e633d72617720686173683d726d6431323800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5d0925b44563b6916f31af0ad5c46405e6eb5fb3f277ab3903d1dcedef604e8cb4a34beacaf651227da7b14de21eb0cee27c48db4d1c45ef7e21a258edf2b76af1dd4fe32084bcc96225059a4765b9f237dff93842085"], &(0x7f0000000200)="dc746d027de6a34c1df5e99ad735314ac5eb120ca12c8f6de26608de0c58afbb1efb4c99cad90cf10d3a3d5cea38f89f6a8cf99139bd6705405cba651d1e9914797e30b4cb7a33eae3fa821bf17ad8b6305295f5870b0ab38ac34c291b8102de6f18d0d4468a4285e28ad71b7d7de145fd2eef18724065bdb3800dd9f0e9fc414dcb28fa53588fe81ae0dea9bba205e69956e548e75db8d00e40ebf6bf9862739f2e", &(0x7f00000002c0)=""/4096)

23:09:18 executing program 3:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x20000, 0xc)
ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000100)={0x0, 0x7, 0x8612, [], &(0x7f00000000c0)=0x5})
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
pkey_alloc(0x0, 0x2)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
r3 = dup2(r2, r1)
write$P9_RSTAT(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="650000007ded09b0b37ba0014087eda733172eeb00577c2ac6797590ace13ff382ed4e22000000005e0000000000000000edff000000000000000000000000000000000000000000000000000000000000000023002676626f786e657431757365722d2e5d28a62773797374656d5d65746831757365722805008a70726f630300656d30"], 0x65)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000200)={0x80000001, 0x7ff, 0x0, 0x9})
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000001c0), 0x4)

23:09:18 executing program 2:
r0 = fcntl$getown(0xffffffffffffff9c, 0x9)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000000080)='loginuid\x00')
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000140))
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4006})
ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000040)=0x1)
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$binfmt_elf64(r1, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
getpid()
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=<r4=>0x0)
r5 = syz_open_procfs(r4, &(0x7f0000000000)='net/sockstat\x00')
socket$xdp(0x2c, 0x3, 0x0)
sendmmsg$inet_sctp(r5, 0x0, 0x0, 0x0)

23:09:18 executing program 4:
unshare(0x2000400)
r0 = socket$inet(0x2, 0x6, 0x100000003ff)
setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000080)=0x7, 0xf4)
r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, r1)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @empty}, {0x1, @broadcast}, 0x4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6tnl0\x00'})

23:09:18 executing program 1:
r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x105402)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000180)=0x800)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)=0x3)

23:09:18 executing program 0:
r0 = socket$kcm(0x2, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00000002c0)=""/251}, 0x48)
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x40000, 0x0)
setsockopt$inet_dccp_int(r3, 0x21, 0x1, &(0x7f00000003c0)=0x2, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000400)={0x1000, 0xffffffffffffb9a3, 0x5, 0x4, 0x4}, 0x14)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x400, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000200)={{0x1, 0x3, 0xa00000000000, 0x3, 0xff}, 0x5, 0x2, 0x7})
r5 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x5, 0x400)
getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000040)={{{@in=@local, @in=@local}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8)

23:09:18 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x101100, 0x0)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000000c0)=0x5, 0x4)
r4 = eventfd(0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f0000000140)={0x3, 0x20, [0x6, 0x78b7, 0x100000000, 0x6, 0x7, 0x0, 0x1, 0x3]})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x3, 0x0, 0x1, r4, 0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000037000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffba)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  352.863279] device nr0
 entered promiscuous mode
23:09:19 executing program 4:
r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x50000000}, 0xc)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x200000, 0xc04e27d3b503e3df})
syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
socket$inet_smc(0x2b, 0x1, 0x0)
pipe(&(0x7f0000000240))
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000001c0)=0x1, 0x4)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0)

23:09:19 executing program 1:
perf_event_open(&(0x7f000025c000)={0x6, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbed9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

23:09:19 executing program 2:
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000100)='clear_refs\x00')
sendmmsg$inet_sctp(r1, 0x0, 0xfffffffffffffe5e, 0x100000000000000)
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000240)={0xbf0000, 0xfffffffffffff801, 0x11ea, [], &(0x7f0000000200)={0x9b09d6, 0x8001, [], @value=0x6}})
recvfrom$inet6(r1, &(0x7f0000000000)=""/226, 0xe2, 0x12002, 0x0, 0x0)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000002c0)={<r2=>0x0, 0x9}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000340)=@assoc_id=r2, 0x4)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000280)=0x47, 0x4)

23:09:19 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000080)=""/161)
r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x80, 0x0)
ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000180))
syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2)
r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7f, 0x80000)
ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000040)={0x2, 0xfffffffffffffff8, 0x0, 0x8, 0x6, 0x191f})

23:09:19 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x10000, 0x0)
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x1)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@timestamp], 0x1)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)=<r1=>0x0)
fcntl$setown(r0, 0x8, r1)
fsync(r0)
r2 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x1, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8)
quotactl(0xffffffff, &(0x7f0000000140)='./file0\x00', r3, &(0x7f00000002c0)="9babb4bae512f364b028f5c168b2e64e3c4419e7afb2e712d7ebf740e7dcd27d90ea422b484f91592c96b4506edd02650aeaee39bbe492bbe799fc331ae70ff1c37fe448ce66513bf75a04b15338a9cb")
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000340)={0x4, {{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, [], 0x1d}, 0xe40}}}, 0x88)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000400)=0x20000)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000440)={<r4=>0x0, 0xc3, "b84ce8d1ceb31f74cbb952ed3c89b8d68f71ab1829aa971425498e7b5131fade4705e4c1cc61a9574ce6576645ec671edcff130d2023dbc50197ee989dcb646dc1a9107349c35d416cb9e2165cb6853332b38e4d833d8f94acaa4a0419e80b46e520b0bfff619be16c6cdb91c48c59afba5625f515cc9b23cf8f11ec5ae5a96e70cae30a67ae8fd7a87b234f48424f6130cea4469b352438eb026419d6e3733ace5b76b16cb0aacb9eed8c771472a65c21e6205abcb0149ee2595b92921284bcad9b1e"}, &(0x7f0000000540)=0xcb)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000580)={r4, 0x36d7}, 0x8)
openat$vicodec1(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/video37\x00', 0x2, 0x0)
write$smack_current(r2, &(0x7f0000000600)=')\'ppp1GPL\x00', 0xa)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000640)={0x6, 0x7, 0x0, 0xfff, [], [], [], 0x4, 0xffffffffffff8001, 0x1, 0xffff, "8358afa2e19ce08db442f5a8931819e7"})
ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000780)=""/36)
ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f00000007c0)=""/193)
read$alg(r0, &(0x7f00000008c0), 0x0)
ioctl$KDDELIO(r2, 0x4b35, 0x9)
ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000900))
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000940)={r4, @in6={{0xa, 0x4e21, 0x4, @local, 0x8}}}, 0x84)
socket$inet6(0xa, 0x7, 0x50)
ioctl$TIOCLINUX5(r2, 0x541c, &(0x7f0000000a00)={0x5, 0x0, 0x8, 0xfffffffffffffe01, 0x93})
r5 = msgget(0x0, 0x80)
msgctl$IPC_INFO(r5, 0x3, &(0x7f0000000a40)=""/234)
ioctl$TCGETS(r2, 0x5401, &(0x7f0000000b40))
ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000b80))
clock_gettime(0x0, &(0x7f0000000c00)={<r6=>0x0, <r7=>0x0})
write$evdev(r0, &(0x7f0000000c40)=[{{0x77359400}, 0x16, 0x11, 0x1f}, {{}, 0x0, 0x9, 0x5}, {{}, 0x17, 0x40, 0x100000001}, {{0x77359400}, 0x2, 0x5, 0x3}, {{0x0, 0x2710}, 0x17, 0x4, 0xce}, {{}, 0x1f, 0x7ff, 0xb234}, {{}, 0x17, 0x3, 0x9}, {{}, 0x12, 0x7, 0xc1}, {{0x77359400}, 0x4, 0x3f, 0x1ff}, {{r6, r7/1000+10000}, 0x1, 0xcbd5, 0x8}], 0xf0)

23:09:19 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0xfffffffffffffffe)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x94b, 0x4)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4)

23:09:19 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="c300000000000000bc0000000000000095b22b0000000000"], &(0x7f0000003ff6)='GPL\x00'}, 0x48)

23:09:19 executing program 2:
r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000080)="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")
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2, 0x200000)
ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000040))
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0)

23:09:19 executing program 4:
perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0xffffffffffffffff, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x60)

23:09:19 executing program 1:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f0000508ff6)='./control\x00', 0x0)
read(r0, &(0x7f0000e6d000)=""/384, 0x180)
signalfd(r0, &(0x7f0000432ff8)={0xfffffffffffffffe}, 0x8)
r1 = inotify_init1(0x0)
fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3)
r2 = gettid()
fcntl$setown(r1, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={0xbffffffffffffffe}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000040)='./control\x00', 0xa4000960)
open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0)

23:09:19 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00', 0x4})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f00000000c0))

23:09:20 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "eee0622754693ef02379234b90ec52c269be082e9a3a9082e5dbbac742b02ae46b10fa1052af2de31ee6300521058ef24807bd2b19891ea46ed3e20ca82e7e580cc3a3718fb86db9229d2edfe05146b238caef42acc518384fd6"}, 0x5e)
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)

23:09:20 executing program 0:
r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1)
ioctl$NBD_SET_SIZE(r0, 0xab02, 0x101)
futex(&(0x7f0000005ffc), 0x4, 0x0, 0x0, &(0x7f0000000000), 0x0)

[  354.068954] input: syz0 as /devices/virtual/input/input11
23:09:20 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0xf)
r1 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x300000003}, 0xfffffffffffffee3)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0xc0, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000500)=ANY=[@ANYBLOB="2a0000006b526ea056c8093fc2839ecc1069f583602e34697702fae709c043e3477cbee1e5f983bdaa60aaf42fc278905a7aa656e815bd382fb17efb605d46dd596c194054f3efc95ac0bc5341bc1ea58efbc4960647b2dba9649cf20e07a56d1d64ec17ce23d95d57fcc5e000a9560e750b44a51a531a"])
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01000000000000cbb342e181121b4901b25b63ad4200821bb4b595f37861d4ca9f89bad555c2d62d1eb21357dd46fe30300e1771f266d14f45da53e4e3472c0b30f84a69ffffffffffffffb675070bc2c3f9e2f676b17b751a7cf5b0868a3e20983fd40504424f51022829e76c9a5ea04ccc77c70f6429231a860c628795245598d64819e75865692438717cc35818c5025d5c4aede8e0bc5c4f445d9f0264c57a14bc2ec425603801a3fec6371ea03e02401c76e4fca77cd735578231f3b3f9"], 0x14}}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffff9c, 0x28, &(0x7f0000000000)={0x0, <r4=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r4, 0x1a, 0x18}, 0xc)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x22164a00}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, r5, 0x604, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x54, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3e20}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f8}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x5)

23:09:20 executing program 2:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x101000, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f00000002c0)=0xe8)
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@local, @in6=@loopback, 0x4e23, 0x0, 0x4e23, 0x7fff, 0xa, 0xa0, 0x80, 0x2e, r1, r2}, {0x66, 0xe1, 0x101, 0x1, 0x3ccc, 0xffffffffffffff01, 0x9d88, 0xfb7c}, {0x80, 0xfff, 0x5, 0x1}, 0x80, 0x0, 0x0, 0x1, 0x1, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x4d5, 0x3f}, 0x0, @in6=@dev={0xfe, 0x80, [], 0x1b}, 0x34ff, 0x2, 0x1, 0x7, 0x7f, 0x0, 0x7}}, 0xe8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000140)=0x81, 0x4)
ioctl$FICLONE(r3, 0x40049409, r3)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r4, 0x0, 0x0, 0x0)
set_tid_address(&(0x7f0000000180))
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, r5, 0x71a, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0xfa35, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x844)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f00000001c0)={0xc0, @tick=0x5, 0x0, {0x1, 0x2e2}, 0x6, 0x1, 0xff11})
setsockopt$inet6_dccp_buf(r4, 0x21, 0xc, &(0x7f0000000000)="ef24041d44db2f60edff526a7398050639c36beecdda5507f08e50fc33e0f465eea9d2f9687394bc7acd521ce198c2cf02c8af82eda43b1bbd04a71e88b97b7038db78ec2030aa26acd2a8158ef72ff725edcce73c6c64d722f6ef35edaf8476d9160963f120b51df33ce41b16ebefc397d8d6021ac2d8c1ee69e1423835ff0b8e62ea3e849b3aadeeefec13c5934ced021b0cdfd893ed6a5cafb6b6a5e12fbf2ec169a626ae1645841e982792171ea73b737d539f46889572ce7f99c5df08a56ae0416d0f68059e7537377bd2144c63c691781d52be6bbe1c4f1ddc1ede322471865ec1", 0xe4)

[  354.150410] input: syz0 as /devices/virtual/input/input12
23:09:20 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2)
r2 = syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0x9, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001fd)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', <r3=>0x0})
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000002c0)=0xfff)
getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000140)={<r5=>0x0, 0x0, 0x5e407d6b, 0x7, 0x0, 0x452f, 0x1, 0x800, {0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x11}, 0x1}}, 0x7fffffff, 0x65f, 0x80000000, 0x40, 0x1d}}, &(0x7f0000000000)=0xb0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r5, 0x4}, &(0x7f0000000200)=0x8)
bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="0459e5104a4e"}, 0x14)

23:09:20 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', <r1=>0x0})
setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000000)=0x8, 0x4)
r2 = socket$l2tp(0x18, 0x1, 0x1)
ioctl(r2, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070")
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x40, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x400000, 0x0)
ioctl$IMGETVERSION(r3, 0x80044942, &(0x7f00000001c0))

23:09:20 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x40000)

23:09:20 executing program 4:
r0 = socket(0x12, 0x805, 0x8)
getsockopt(r0, 0x114, 0x5, 0x0, &(0x7f0000000000))

23:09:20 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x80000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x6a8bdbee74d45d91)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0xfffffffffffffffe, 0x80000018000})
r3 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x36e5, 0x2)
ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000140))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff4d, 0x40, 0x0, 0xffffffffffffff99)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x4000, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000007100)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000007380)={&(0x7f00000070c0), 0xc, &(0x7f0000007340)={&(0x7f0000007140)={0x1dc, r5, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100000000}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdf3}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x70b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x83d3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x634}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x404}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffff6d4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  354.642549] protocol 88fb is buggy, dev hsr_slave_0
[  354.648189] protocol 88fb is buggy, dev hsr_slave_1
23:09:20 executing program 1:
r0 = dup(0xffffffffffffffff)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f00000000c0)=0x40, 0x4)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000440)='./file0\x00')
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x208200)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000b80)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f00000006000000b0050000f802000000000000000000003802000000000000180500001805000018050000180500001805000006000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0x610)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)

23:09:20 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000000)={0x8, 0x4, 0x6fed})
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)

23:09:21 executing program 4:
r0 = socket$kcm(0x10, 0x4000000002, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff56, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000002b00812de45ae087185082cf0124b0eba06ec40002410000000000110f0000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0)

23:09:21 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getresuid(&(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000300), &(0x7f0000000340))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC=r3, @ANYBLOB="2c646f6e745f6d6561737572652c7375626a5f726f6c653d2f4070726f63242e25657468302973656c662daa2c61707072616973652c646f6e745f6d6561737572652c736d61636b66737472616e736d7574653d63657068002c0000cb3f5c763021fc54c5ee2b1dc2a3a294d00ec0fd22f28e83564cc0bb324c0a7536f6e7e212b03272d87d235ac22cd764505f6d6442aa01bcbc0b9f5119df59e8c559047468d076aed22934124653a874ff164345cc1a4561994805fac00f2e26970747694b5010cae29a15759b6f4817cc122f119ce494b65fbf8ee10761222aa7102db470f4f8d7ec45bbea3da23a059b811436caf839b71965dc618f738f8ecb7bf244a79b8210d97ae40f8ac15d22644e26a62c5599a46b6fb06f30"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)
signalfd4(r4, &(0x7f0000000080)={0x4}, 0x8, 0x800)

23:09:21 executing program 1:
r0 = socket(0x2, 0x1, 0x0)
getresuid(&(0x7f0000000480), &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500))
stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getresgid(&(0x7f0000000600)=<r3=>0x0, &(0x7f0000000640), &(0x7f0000000680))
stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d80)=@nat={'nat\x00', 0x19, 0x4, 0x5f0, [0x20000780, 0x0, 0x0, 0x20000a28, 0x20000a58], 0x0, &(0x7f0000000000), &(0x7f0000000780)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x19, 0x41, 0x9335, 'bpq0\x00', 'veth1_to_team\x00', 'tunl0\x00', 'syzkaller0\x00', @link_local, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x70, 0xa8, 0xe0}, [@snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xffffffffffffffff}}}]}, @snat={'snat\x00', 0x10, {{@broadcast, 0x10}}}}, {{{0x0, 0xa, 0x88fb, 'ip6gre0\x00', 'ip6gretap0\x00', 'ipddp0\x00', 'sit0\x00', @remote, [0x0, 0x0, 0xff, 0xff], @empty, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0x128, 0x160, 0x198, [@owner={'owner\x00', 0x18, {{r1, r2, r3, r4, 0x5, 0x4}}}, @ip6={'ip6\x00', 0x50, {{@remote, @mcast1, [0xff, 0xff, 0xffffffff, 0xff], [0x0, 0xffffff00, 0xffffffff, 0xffffff00], 0x7, 0x85, 0x21, 0x9, 0x4e22, 0x4e23, 0x4e23, 0x4e24}}}]}, [@common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xfffffffffffffffd}}}]}, @snat={'snat\x00', 0x10, {{@random="1236833c8c3a", 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x11, 0x10, 0xf7, 'bond_slave_0\x00', 'teql0\x00', 'bond_slave_1\x00', 'syz_tun\x00', @remote, [0xff, 0x0, 0xff, 0xff, 0xff], @remote, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe0, 0x118}, [@arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xfffffffffffffffd}}}, @arpreply={'arpreply\x00', 0x10, {{@random="211f77acaa02", 0xfffffffffffffffe}}}]}, @arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x13}, 0xffffffffffffffff}}}}, {{{0x9, 0x8, 0x0, 'lapb0\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'hsr0\x00', @remote, [0xff, 0xff, 0xff, 0x0, 0xec9dded7475e8a88, 0xff], @broadcast, [0x0, 0xff], 0x128, 0x198, 0x1d0, [@mark_m={'mark_m\x00', 0x18, {{0xa0, 0x3, 0x3, 0x3}}}, @ip6={'ip6\x00', 0x50, {{@mcast1, @dev={0xfe, 0x80, [], 0x23}, [0xffffff00, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0xffffffff, 0x0, 0xff000000], 0xfffffffffffffff8, 0xbf, 0x70, 0x4, 0x4e21, 0x4e20, 0x4e21, 0x4e24}}}]}, [@snat={'snat\x00', 0x10, {{@remote, 0xffffffffffffffff}}}, @snat={'snat\x00', 0x10, {{@remote}}}]}, @arpreply={'arpreply\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}}]}]}, 0x668)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x3b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'syzkaller1\x00', 'ip6tnl0\x00', '\x01ama\x00\x00\x00\x00J\xb2\xce\xc8\x00', @remote, [], @remote, [], 0x2a8, 0x2a8, 0x320, [@bpf0={'bpf\x00', 0x210, {{0x60}}}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "339ebc4bb0c0fba43162d5c302d891b307544d821a0dcb492ba4aa23baaca6e53f392b79c58e0581db804208237c3df1c60b6b34da2747cd3200fbb384511226"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffdffffffffc}]}, 0x428)

23:09:21 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)

23:09:21 executing program 3:
r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0xfffffffffffffffe)
syz_open_dev$vivid(&(0x7f0000000100)='/dev/video#\x00', 0x1, 0x2)
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x400, 0x0)
ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f00000000c0))
ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000001c0)={0x28ded0b7, 0x0, "bd695349b67bb1c9ed14f813594b29c394028264e6dded22d4237c214553bb7f", 0x0, 0x0, 0x2})

23:09:21 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getresuid(&(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000300), &(0x7f0000000340))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC=r3, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)
signalfd4(r4, &(0x7f0000000080)={0x4}, 0x8, 0x800)

23:09:21 executing program 4:
syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x2)
r0 = socket$inet6(0xa, 0x80803, 0x87)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8000, 0x0)
ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f00000000c0)={0x8, "f08aba902dc47ad14056e9882d3de7cf5e754306826cc8b03920ae825e3ffa45", 0x4, 0x4b1, 0xffffffff, 0xa9ec, 0x14, 0x1, 0x4, 0x6366})
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x1, 0x0, 0x90}}, 0xe8)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
ioctl$TCFLSH(r2, 0x540b, 0x10001)
writev(r0, &(0x7f0000000640)=[{&(0x7f0000000140)="b0141c6c7321", 0x6}], 0x1)

23:09:21 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x1, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0x4, 0x2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}], 0x1c)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)

23:09:21 executing program 2:
ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/rfcomm\x00')
getpeername$packet(r1, &(0x7f0000000900)={0x11, 0x0, <r2=>0x0}, &(0x7f0000000940)=0x14)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000340)={<r3=>0x0})
capget(&(0x7f0000000680)={0x20080522, r0}, &(0x7f00000006c0)={0xffffffff, 0xffffffffffffff01, 0x8, 0x2, 0x8, 0x100000001})
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000380)={r3, 0x3})
connect$can_bcm(r1, &(0x7f0000000980)={0x1d, r2}, 0x10)
preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000140)=""/184, 0xb8}, {&(0x7f0000000200)=""/54, 0x36}, {&(0x7f0000000240)=""/178, 0xb2}], 0x3, 0x0)
getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000003c0)=0x2, &(0x7f0000000400)=0x2)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000440)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000540)=0xe8)
getgroups(0xa, &(0x7f0000000580)=[<r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee01, 0xee00, 0x0, 0xee01, 0xee01, 0xee00, 0xffffffffffffffff])
write$FUSE_ENTRY(r1, &(0x7f00000005c0)={0x90, 0xffffffffffffffda, 0x2, {0x3, 0x0, 0x80000000, 0x149, 0x20, 0x3, {0x6, 0x6, 0xffffffffffffff7f, 0x3, 0x7, 0x1ff, 0x7, 0x2, 0x83, 0x1ff, 0x101, r4, r5, 0x40, 0x80000001}}}, 0x90)
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x6)
fstat(r1, &(0x7f00000000c0))

23:09:21 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000001000)={{}, {0xa, 0x0, 0x0, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0xfffffffffffffee5)
setsockopt$inet_int(r0, 0x0, 0x20000040, &(0x7f0000000ffc), 0x4)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000080)={0x8, 0x8, 0x9}, 0xc)
getsockname$tipc(r0, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10)

23:09:21 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getresuid(&(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000300), &(0x7f0000000340))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC=r3, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)
signalfd4(r4, &(0x7f0000000080)={0x4}, 0x8, 0x800)

23:09:21 executing program 4:
r0 = socket$l2tp(0x18, 0x1, 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000b1c000/0x1000)=nil})
madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008)
dup3(r0, r2, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000280)='memory.high\x00', 0x2, 0x0)
writev(r4, &(0x7f0000000700), 0x1000000000000110)
io_setup(0x3, &(0x7f0000000000)=<r5=>0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x40000, 0x0)
io_pgetevents(r5, 0x0, 0x0, 0x0, 0x0, 0x0)

23:09:22 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
r2 = dup2(r1, r0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)={0x1, 0x0, 0x20, 0x0, 0x9, 0x1, 0x779, 0x5, 0x5, 0x0, 0xff, 0xfffffffffffffe01, 0x0, 0x4, 0x80000001, 0xffff, 0x10000, 0x1, 0x20})
ioctl(r1, 0x262, &(0x7f0000000100)="65907238af7571869c5ae0e4e4dd39f7520ad2d8ff39445a8505483dafe584b99d1b5b3c51c0ee0a69b34c88ef4587c1128d5457a750b59efeb0eb9d68e00a6bc40c042f156bc7a877813f66b7f7519327ee0cb18d5148ba410433e03ca48cfb720b8f0c55d8d2dd75a2d14889c0b345954bbe7cf8a28dd5a75022815b363b09229592f1a6f970d6ac722f8cbf92c002729eba8add2d57b38a87d221f28dc4016945")
write$P9_RSTAT(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x54)

23:09:22 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x7, 0x1)
getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f00000000c0)={@rand_addr, @local, @multicast1}, &(0x7f0000000080)=0xc2)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)

23:09:22 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
exit_group(0x0)
sendmsg$key(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f000001b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b0000020000000000000d000000007d18cc8cd0d506531938ead8b369a0499fcca0e14ed01b3e87e29e4e5dffaf97de9fad"], 0x10}}, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'bcsh0\x00', 0x7})

23:09:22 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getresuid(&(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000300), &(0x7f0000000340))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC=r3, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)
signalfd4(r4, &(0x7f0000000080)={0x4}, 0x8, 0x800)

23:09:22 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sched_yield()
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)

23:09:22 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)='securityfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='ramfs\x00', 0x0, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x1)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[{0x8000, 0x692f, 0x8, 0xfffffffffffffffd}, {0x3, 0x7fff, 0x7, 0x5}, {0x6, 0xffffffff, 0x93b, 0x9b1e}, {0x2, 0x1, 0x3}, {0x3631, 0x6, 0x800}]}, 0x10)
chdir(&(0x7f0000cd2ff8)='./file0\x00')
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={<r1=>0x0}, &(0x7f0000000280)=0xc)
ptrace$setsig(0x4203, r1, 0x0, &(0x7f00000002c0)={0xf, 0x1, 0x8})
symlink(&(0x7f0000000100)='..', &(0x7f00000000c0)='./file0\x00')
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)

23:09:22 executing program 3:
mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x80000001, 0x9, 0x0)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x2)
mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000080)=0x1f, 0x8, 0x8)

23:09:22 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getresuid(&(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000300), &(0x7f0000000340))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC=r3, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:22 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x5)
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)

23:09:22 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
r1 = shmget$private(0x0, 0x2000, 0x83564ea96e569c70, &(0x7f0000ffe000/0x2000)=nil)
shmctl$IPC_RMID(r1, 0x0)
r2 = accept(r0, &(0x7f0000000380)=@sco, &(0x7f0000000300)=0x80)
getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0x4)
setxattr$trusted_overlay_opaque(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000340)='y\x00', 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
socket$key(0xf, 0x3, 0x2)
r3 = eventfd2(0x0, 0x0)
r4 = epoll_create1(0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000d4a000))
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000deb000))
ioctl(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x416001, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r6, 0x40045402, &(0x7f0000000200)=0x1)
ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0)
poll(0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@sack_perm, @sack_perm, @mss, @window, @sack_perm], 0x5)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14)
shutdown(r0, 0x2)

23:09:22 executing program 4:
add_key(&(0x7f0000000480)='pkcs7_test\x00', &(0x7f00000004c0)={'syz'}, &(0x7f0000000500)="30b8", 0x2, 0xfffffffffffffffb)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r1, r2})

23:09:22 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x21)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x3e, 0x105, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x100, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000040)={0x1, 0x4})

23:09:23 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getresuid(&(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000300), &(0x7f0000000340))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC=r3, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  356.985811] Unknown ioctl 1074310930
23:09:23 executing program 2:
r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x1, 0x2, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}]})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x0)

23:09:23 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffd)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000100)="0a5cc80700315f770e857050")
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0xffffffff, 0x4)
perf_event_open(&(0x7f0000000000)={0xfffffffffffffffe, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x393, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0)
r1 = gettid()
ptrace$setregset(0x4205, r1, 0x0, &(0x7f0000000340)={&(0x7f0000000300)="fa6becc5dbc336366d2002f596", 0xd})
setxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000280)=@v1={0x1000000, [{0x7fffffff, 0x10000}]}, 0xc, 0x2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00')
r4 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
r5 = syz_open_procfs(r1, &(0x7f0000000d00)='fdi\x1a\x9a6\xd03\x00\xd7\v\x8c\xd2\xc0!RI\xe1w^\xd4\x97P\xeb\xc1\x15\xcc)\x12\xd7\xbd\xc2\xa9\xddI\x19\a\xef{\xd8R\x01 \x9c\x14P\xde\x01\xc6GP\x16O\xccsz\xe2|$\x9c\f!\x9cSp\xb2\v\x7fs\xb8XV\xc7\xb0\x8c\x99\x8340\xa7)e7\xbd\xfbW\xc1\x9dF\x92\x84,rq\x0f\x83\xe9\x03\x94o^\xa2\x85\xd4\x95\x9d\xdf>\xc8/\x83:\xed\xfe\'\xe71o\x10\xfbqT\xd4=\xde\xbe\xf1\xe4A\xff\x00\x00\x00\xc8\xecH\x99\xbd\xee\x8e\x19\x8e\x14T\xb0y@N')
exit(0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000001700)='fd/3\x00')
preadv(r4, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/66}, {&(0x7f00000005c0)=""/125}, {&(0x7f0000000940)=""/193}, {&(0x7f0000000780)=""/17}, {&(0x7f00000007c0)=""/212}], 0x100003b0, 0x4)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=ANY=[], 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000a40)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00000006c0)=0xe8)
setuid(r7)
ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240))
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'\x06\x00', 0x64f37c35bb4fae06})
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000b80)={<r8=>0x0, 0x1, 0x1, [0x7]}, &(0x7f0000000bc0)=0xa)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000380)={<r9=>r8, 0x46e04341}, &(0x7f0000000440)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000640)={r9, 0x3e, "b1c90572f36a3807653b65ab39003ec3a498c7f306b5c3dcba9682b0497d9cee9fff3253fa015cdf6d6be03423e2d12d63db699924a37941af55336cd8c6"}, &(0x7f00000004c0)=0x46)
rt_tgsigqueueinfo(r1, r1, 0x2d, &(0x7f0000000700)={0x1b, 0x100000000, 0x8001})
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={r3, r6, 0xd, 0x3}, 0x10)
fgetxattr(r5, &(0x7f0000000480)=@known='system.posix_acl_access\x00', &(0x7f00000003c0)=""/123, 0x28)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f0000000b40))
connect$inet(r3, &(0x7f0000000c00)={0x2, 0x4e23}, 0x10)

23:09:23 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
unshare(0x400)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x200000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x200000, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f00000001c0)={'filter\x00', 0x0, 0x4, 0xc2, [], 0x2, &(0x7f0000000080)=[{}, {}], &(0x7f00000000c0)=""/194}, &(0x7f0000000240)=0x78)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0)

23:09:23 executing program 3:
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x3)
memfd_create(&(0x7f0000000040)='em1*procem0$vboxnet0\x00', 0x3)
sendto$inet6(r1, &(0x7f0000b0cf6e), 0x0, 0x0, 0x0, 0x0)
r2 = fcntl$getown(r1, 0x9)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x400, 0x0)
ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000100)={[{0x32ec4c33, 0x800, 0x0, 0x100, 0x80, 0x101, 0x80, 0x2, 0x7, 0x5, 0x7, 0x4, 0x3}, {0x9, 0x980e, 0x1, 0x8, 0x913e, 0x6, 0x6, 0x7fff, 0xffffffffffffff49, 0x81, 0x23, 0xfffffffffffffff7, 0xc82c}, {0x9, 0x5, 0x80000001, 0x7fff, 0x6, 0x83e, 0x2, 0x4, 0x9, 0xa1, 0x8, 0xffffffff, 0x2e27}]})
ptrace$poke(0x4, r2, &(0x7f0000000000), 0x4ff)
dup2(r1, r0)
bind$vsock_dgram(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
recvmsg$kcm(r0, &(0x7f0000001400)={&(0x7f0000000280)=@nl, 0x80, &(0x7f0000001380), 0x1a0, 0x0, 0x131}, 0x0)

23:09:23 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)

23:09:23 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getresuid(&(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000300), &(0x7f0000000340))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC=r3, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:23 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ppoll(&(0x7f0000000180)=[{r0}, {r0}], 0x2, 0x0, 0x0, 0x0)
r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x38, 0x1e, 0x7, 0xa, 0x3, 0x1, 0x1, 0xba, 0x1}})
shutdown(r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))

23:09:23 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)

23:09:23 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getresuid(&(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000300), &(0x7f0000000340))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC=r3, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

23:09:24 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getresuid(&(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000300), &(0x7f0000000340))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC=r3, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

23:09:24 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80, 0x0)
r2 = fcntl$getown(r0, 0x9)
write$P9_RGETLOCK(r1, &(0x7f0000000040)={0x29, 0x37, 0x5, {0x0, 0x40, 0x3, r2, 0xb, 'clear\xcd\x99efs\x00'}}, 0x29)
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x3)

23:09:24 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005540)='/dev/kvm\x00', 0x0, 0x0)
ioctl$TIOCNXCL(r0, 0x540d)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x109103, 0x0)
ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000100)={0x2, 0x5, 0x2, 0xf14, 0x7, 0x800})
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc004ae0a, &(0x7f0000000000)=""/143)

23:09:24 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmsg$unix(r0, &(0x7f00000014c0)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001440)=[{&(0x7f00000000c0)="1d87d2e11987b41ee77a825a8a5dbeef963761051c3022afcd2110dd674c491603c8fef28e537135cc57893c3c394ea6ee8f53f29842cbad3b4bbaff5f76848f660356aa66e8a856c1", 0x49}, {&(0x7f0000000140)="2ec34d1bc4ebe8c9e341fc29dd3c102d34fc34e3bd0ea6ca7f2ea12e0b3962aaf9833c81a602a249a0004f4134d3bfaf9b22bdf9a2e710c00a95f22b21cd53f102c75d2ed0a283ccc72d955181ce93277ee9a23f42c0bc6e2d45ddd68e57a212e823ba9cd0e788b36c94bd6ec84a8c13abd30ab15f83b26f874c0e8eae23cfd43f64a8aa0bfc420b0652c7e38d60accbc6385d2b564927d8db3ba3a76660a78f9499dc285a45fb70bc1824c3e4", 0xad}, {&(0x7f0000000200)="764a2585b7dd56813edcd8939d9547261a043f18d04bac35de8efd09d736d3d887149df42b2dae1b05ecba6110f66a6a19b2c5c73804678bcaca76a1635c235cde5ef22abc76081189b1de7d1fc96b5d9b96ac5a6f4758b0a8a0b06df4a74dd1453e7cbf438e3647f593cf05e6bc84f1a82aaad6ec5fcac1b6894bb2c62eaff89af8e1cc1d91c76e5d8cd62c824e6134e5bbaf98", 0x94}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f00000002c0)="8314ee0449d98afb57eba03c485a190d1f711563af6e3d89c3d6243de323ca3b6129b5146806da5519036865fa8d7e", 0x2f}, {&(0x7f0000001340)="a9e7f0c471ea7a6264236d574772e885856f350d98f4c006a835822b66e42073efaadfab4a183cb6515cc14036dfeb032e1873a528ca165698ac35a8e83674479b9af37ff62cc99173b41e1456f999506a31d9353a7c9430b2a0ac3c69adadc0d4d4f42d9e676a7e32aee8d2bd4e7514dd2a10e6b4b47335cd2bd5802832779aba1626565105390ad3afc7c0198dea0703fb5465911f2892a2760d4985394c9dab4826a5d44d33bf8ab9f47a214e018dd581274efbac4e18bbc1168d456c14303cd11ad9efda419cb6", 0xc9}], 0x6}, 0x1)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000001500)={0x0, {0xc9c, 0xf6c}})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x8, 0x2, 0x3, 0x8, 0x4a75, 0x2}, 0x20)
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000001580)='nbd\x00')
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0xa0002000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x1c, r1, 0x322, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)

23:09:24 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x4)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=<r2=>0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000380)={{0x9, 0x0, 0x1, 0x1, '\x00', 0x1f}, 0x5, 0x31, 0x1, r2, 0x1, 0x2, 'syz1\x00', &(0x7f0000000100)=['/dev/infiniband/rdma_cm\x00'], 0x18, [], [0x4, 0x6, 0x80000000, 0x3f]})
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x0, @remote}}}, 0x90)

23:09:24 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getresuid(&(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000300), &(0x7f0000000340))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC=r3, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

23:09:24 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x4000000000000}, {0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]})

23:09:24 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
openat$md(0xffffffffffffff9c, &(0x7f0000000240)='/dev/md0\x00', 0x0, 0x0)
unshare(0x400)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:09:24 executing program 2:
fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={0x0, <r0=>0x0})
r1 = syz_open_procfs(r0, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000000)={<r2=>0x0, 0xe1, "1d80ab03f563891a00d84e8e7d71a285a1eeb4c73b34598e6b936721e608dc548dfb1832212329af832bccbcc1a25c3c04b853f8b8ce8d93410f4d3896e975d3cc9a362366b3d4b00585b2202fb6bc2a5b720b1a0c333f25d806629732a77fef71ea03235815c5fab9b483143d996b45a956b5214a78d33d29981c6b203d39646e241e4c1a0dee6c14bc8dbe6126f5c662ade7662f2bb3f3eb6227e0aad955d6fc12f72301595e881cff6c89ea0396ba282ad76a44de448477627488d76816c3847f53fc74fa6214b03d290edbd3af33f3ea95b039add89699305260c8de0edf27"}, &(0x7f0000000100)=0xe9)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x3, 0x4, 0x3f, 0xc6c, r2}, &(0x7f0000000180)=0x10)

23:09:24 executing program 4:
r0 = epoll_create(0x9)
r1 = epoll_create(0x4)
r2 = socket$rds(0x15, 0x5, 0x0)
r3 = epoll_create(0x5b)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f000000e000))
r4 = msgget$private(0x0, 0x10)
semget(0x1, 0xffffffffffffffff, 0x200000000008001)
msgctl$MSG_STAT(r4, 0xb, &(0x7f0000000080)=""/149)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f000000d000))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000000dff4))

23:09:25 executing program 1:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x8800, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x10000, 0x0)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00')
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000580)={0xbf0000, 0x100000000, 0x1, [], &(0x7f0000000540)={0x9b09fb, 0x9, [], @string=&(0x7f0000000500)=0x1}})
sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4a}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r2, 0x31, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x84}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x600210)
readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/145, 0x91}], 0x1)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffff9c, 0x10, &(0x7f0000000100)={&(0x7f0000000040)=""/159, 0x9f, <r3=>0xffffffffffffffff}}, 0x10)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r3, 0x4)
ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f00000004c0))
ioctl$sock_bt_cmtp_CMTPCONNADD(r4, 0x400443c8, &(0x7f0000000480)={r1, 0xf8})

23:09:25 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000080))
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00')
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e23, 0x20, @rand_addr="7b741d10516da28ac3aecd7603f9291a", 0x7}, @in6={0xa, 0x4e20, 0x1000, @dev={0xfe, 0x80, [], 0x24}, 0x7}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x94)
sendmmsg$inet_sctp(r0, 0x0, 0xbf40c3b7023ffc6, 0x400000000040004)
write$FUSE_DIRENT(r2, &(0x7f00000002c0)={0xe0, 0x0, 0x5, [{0x2, 0x6, 0x10, 0x759, 'system-]%)md5sum'}, {0x6, 0x8, 0xb, 0xfffffffffffffeff, 'clear_refs\x00'}, {0x4, 0x2, 0xb, 0x0, 'clear_refs\x00'}, {0x0, 0x88, 0x39, 0x9, 'wlan1--@ppp0*mime_type):wlan1[@)mime_typevboxnet1$selinux'}]}, 0xe0)
getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000180)={<r3=>0x0, 0x5, 0x7, 0xfffffffffffffe00, 0x4, 0x4, 0xfffffffffffffffb, 0x8, {0x0, @in={{0x2, 0x4e20, @empty}}, 0xb3, 0x3f, 0x6, 0xfffffffffffff000, 0x7df}}, &(0x7f0000000240)=0xb0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000280)={r3, 0xffff, 0x7f, 0xfd, 0x1f, 0x1}, 0x14)

23:09:25 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getresuid(&(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000300), &(0x7f0000000340))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC=r3, @ANYBLOB="2c646f6e745f6d6561737572652c7375626a5f726f6c653d2f4070726f63242e25657468302973656c662daa2c61707072616973652c646f6e745f6d6561737572652c736d61636b66737472616e736d7574653d63657068002c0000cb3f5c763021fc54c5ee2b1dc2a3a294d00ec0fd22f28e83564cc0bb324c0a7536f6e7e212b03272d87d235ac22cd764505f6d6442aa01bcbc0b9f5119df59e8c559047468d076aed22934124653a874ff164345cc1a4561994805fac00f2e26970747694b5010cae29a15759b6f4817cc122f119ce494b65fbf8ee10761222aa7102db470f4f8d7ec45bbea3da23a059b811436caf839b71965dc618f738f8ecb7bf244a79b8210d97ae40f8ac15d22644e26a62c5599a46b6fb06f30"])
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:25 executing program 3:
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x8, 0xfffffffffffffffc)
ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226)

23:09:25 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000060c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x40000000102)
socketpair$unix(0x1, 0x40000000005, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
fcntl$dupfd(r0, 0x0, r2)
ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0xfffffffffffff800, 0x7})
r3 = dup3(r1, r0, 0x0)
write$UHID_INPUT(r3, &(0x7f0000001240)={0x8, "e52aac313baccb9b551156a2d7c12b7711c32a17d3c4c9ceef08c2046fe288a7036e513019e5e114cc4ae935d23a9990952824f5d0c1f52e2eb94e5301ba9dc9a02818038eaef46fc2c3ebbe46e4a6024c93823f66462ba3d68913fdeadd1087b06846aa3ddf6ed3dc2b61b4960f48c2edf5cdf23c7e8d3f2e6daa71e66b29bc19e377d7df4637d735194a52da503a0ac44383ba5b3da867e09ceae02a9bfc21e7f28814c2fab7da41344e207ca706dc37592abdb685e4b80eb6dc2b1dc550a1d16166d163a4a220a54d7844facbbb2648ee90aa05c3c03ee447d79e517df8ffe70c215bd0bf69e86a5f48d571b9337590d05e9947727c0d77d18a117f110252735ca6700a55fd26838935808cce7b7c222a75339e44230bdeb99bc39c0c1cc20de74fcb9744f4c4a988f3874a846d31abcf5504d78a3e14f35f6cbd123fcff22890cc17c730c3ea9f74616dfe60064552ec25568a6211bdc39483a28bed0df0afc7d7c6d13d301e080c8846ea512a8ccae7a99da8dd3009feaf204d22e32c5ecc333e616159d55328d375e59194c5c9a0b3843afb283d1d26f59e03105e91aa552386468432a09be73220e942394f34c559797b74bfe7c5c2c639a40e4d2e81e1004b127540a0bdd6be2f95698e75e4f1203a47d61f506ac9364be9d98ae46536f74afe08c450ecb902e00f188c9f32aed0677455e10bbe82c763a464f10f64c403c35376b7a675546835209f0e2809e9c2bd191f784dda4b727bfac512497a07474e6d3e13233601df81abcdb6fbfb152483ec61baaee45a5d733c62107f63c55a046401a5ddef70cef8d52cb4784e3efc34de554c8ff48f7ae3d6dc1ed4eb70fe1e610355fd66ce1af8ff63b6641fb3dadfab8a9b0b1f26ca11f7287258ad4766e08340f8f2fd53e7e5f287bb73c186f0290f225687040c762776a02e5e65f1b9b713e8ef98ffe111b3e4e7b761dd3ed763ed8dafd67625fb300ac752c0ff9c0c04b75be292c3f0247bd0b3560f1c76aff38791037fcf2b812f1601934a8fc769f7198e0df685841489263a1495a8a8bab1a63cb12b3089a3e30aab15ae872437e52a6f0dbc4df2d0e8df4c6bcd47beefc179d85b70b42b319453e6efaff96a509420bec299f227c4b676c58038916897f15430ff52087dd97dd329c6b6e207378053accaa31843a333e4f69586103424f44bd67eb355c1fbe078e62f07ebaae46c3e335372127dc5fa70a4579af715e531bda52761dc206aded4678079720603a577ef7e5fb5a81a525b7c96a4047d9d6bb80d7e0ce55cc0a4f73256ae9c515307f13fe54126786de425d7a674b05116104176faac5b9365b33fd2f5a710a5159d342abecede83ad421bbb712cd5b006671a958cec907311719eb3e0b5dc4fb51054e06656a7a2a066c0aac65ceb434ca3f242cb2b1d7a22179a85cbbeeacc2f0135d8dd4d1363a98d2543fa4973e19eb359e956d27f142c75f62c7aecaf47090236b9791847725bc6fde15cd4a119a4976a3f0f2d622973ad9000aae56f88b396fa1881ec0b0a5de9955fc8f864b36eacd635b88826e0a64897d605fa4a14f7786b037cf308bef61c7f860e38f1ae67fe8cb7802dbe85f9c0c082eed1a13e645370d0c95d63bba215ac8a637b8f968aef06329d62ba131b56b46bfcfa6a5e82016d5eeb6e7db45595d1acaaa5ec9886315d3dced9d0a15c44c043ac91e4ae7077139774607b76cbc017f636145beb84c1829a6030f4a895a56b8d141f743c9189a71387893f785804f85927a23ccd79c432ab686b621ec91706ef082b4ea4fa608ce2daca0d2e2e07ff51e6a8fdc22f1c8ee5ae53720f93b4547704fae580e5560e3c7b1ac2a38ffc294d3c96635e3b919339394843c8a171c7d12ceb9c0a11be25783694b177b399e7a495538e293a59d3ab44b176afed6894aa0e501d9b98981be3f2057bf6c9869403a34cb83ad57150c674301f39524a026f3608a3414287bc4e507355823c6f8640bb803a392fb8847023d1db3c39753e72414682c617de9bd0d5b6a55d46004d49f20d2f8f53cdd8eb11402f7895cd7c01b4964fd005c564b0b0e156969ccde818dda3a7cae02d1d3af95081e6549f28976fa81b5e90fbb0a62fea850ffaf0220132189c11a74996261f6de6001c50364f08c4f48fd46a0417ec8ee4d003efeead64b87d64b43cd6868f365e72e26dd9f5f9f74d135f64464cb38dd62051ae70c5a4daabebe700eb9b290b8ed4142db0090219e6186f8f71fa8fe1ebe42f621b8eed182ee8ad0401f0a3530fd48e4d1eb2637f1fbd2a7032b0f85715203c12ab8ff48131bc4ff28272b57119a76bc0b30fef5294c23c0b2bcadfbba37a00502b5e43d72148d9acc7cb7cb39dc830cd6f30262a09eecf29d1055c2edc3926cfd5076aa5f9f172ed145359fc974ca5ded652433d212607bed155df1aff269414548a39a644b6ce927de5de6e6750575c4fd7ea7fe10b1e51fde6975c0c23fc012a8b12fe3fa64e972e4e09eafea165ae5c1ffc9d761e1314a781959c223b96eefde0f4f45c7ac032a8d3f1bd304114c3329a3e4966eddcc8d44ae70bad2932f963100955e2d2d487347c2aa8356bc6bc3c84e418163c758f1372246884e6d80d87d7ab3fe660dda13ada65f200b4fb365223b93bbc29493ae6dbbbb1823edb8e9f045b60414edab955e1046b67a8d4908ab08ad90216125d2ffd8c7814a9a4940df0a653b1cf53cf456412228445ebc8e1584adfe13207ff24fe602e2a506218710483b5544347a3d515b7d2ddcaa1bb7ae3578841918a8ed00659d5f260d23ae17a9ffc77f79758844586fe53517097838a92dde8873e8be1cd5934f1a4bfdd9d0b5725b811c4a2c121b7729946993a736bd195c55684ea680304af4844a1b2f74e2c2b2ccaeceb00b9c2c515b70912efb27643c5624025e358b44853cc0efddc103ee514471af902cd9b68f102c95a91d2b825b473ce842e6367b0b7305ce8be6f9c812abe860bb632e00b69a0370e5c8f9ba0cebbcbe1b9276949c303a4e9e3b6db37a0716520c07512192364abb58399fca973a1b32106096eda8bb85745562e8a35c5e917fdf858091a4c29d6549e10098d6b205fc5cad546fe07b3a70756cf7079c88f3708f0c8527002b99e80cbd584a3737fb37953cd6dccf21add4d4b6e65894490840c008578737d5e208649d1cd34beb403c2226300297853a29cf6c661b426c13306575d81f6fd21712e0ec4366013883b95a71d5094acbf156e42de11cb873744983ec1ff9cfbee2278053b8b4e523388bd41dfd3c2ecaacc5d9d2958bbfa94f4bd0ac1c61c98ab295dd5c69020f1329818df9a2aa88ced03f4e6a4d1f8cb020afcd2384e65511ddeb908ba0c13a03dd32e8d4ccf0246008f35ef5184f81b8fed73b4aae4998bd8c7d784210042247d39396ba881bf43555d0ec58deede7b4729e79d31b2a346527594ca3a47a1723a792a701dc18d0124365e2c4a4fefed48c29a9f2fc747b302eaf92a100b2da211c91de4ab79d4aede483d852635c6f14d38095a5739d475c7aa67fdd54767a056eeb3098dfd8d1c21f32e76f0247f04118448273586856e641b83f540a643e72dc15804b78bac475f39e23291798aa45a2c10aa5fef2d5e4d7b8f529a66535d11c6149e9797f2fcce2804f2a5370345e98b0c02c7dd27135d414fe72f0740423920d68b64f6b8c05788c6693ee1b9abb5d4593a970dc3ee2528765fb739964f4fed7200d7e796a9f3d0d60834e638dd8c29d4e85011e4ba4f127fe765954a5b5bb5d1cc69f2376599d5a3e8c30714893f763c06061072c10cb0eee17eb2a2514acc584b04e169d4a33a330367bb725ff9462f5d50282a2e393293eec8ea1eaab8217cc108798a4a57eccdb00647ab9f07318993f7c59c395a93cbd681d0a967a56e3f13c832c48dcc0d0096870b0d51b754e70b12a849b6f376923f7f7d909f64d64e1d6e338d39166b725265b96ed21e36b12057148d66e5df04b7b734ed0957d47fde172be2473b9ac6fdb823abe3e11ec69a170a14511d5572d6c0d9f6b749acad7003f0567bb6f9381649e42d02764077330d5af3d93185968a9f8dfed16c4a7c768a2bb98304946a557182c0ce93e82b340074e384cc6bd6129483386c654a6ab3bb12fe8e86adafa93f218fdf5019c09292858acd8ef7aa6a78e3f846215856d630ae9c5fc4009693b2767ea55c469f9099693287b35d43ee0f7a5baf3328d37b2c536f2abd6e21e472c105ae982cdd26a5a20562122e71efb1486c28d9409c3114b608f297695958c5604cf0918c0c70c56c79170260d73bde297e47cae1c404cca0a96eed51a2dc8f6f6ad862fe767ee5b5e68f231096825d935b809b3c1b5d9a2cd76cae22652bed7d263b42612ed717eba0aaf2a3989c4520c402d29428010000000000000062fb3fdd073b91d4e2f6895fba9639ee78bd8ccb5bc3ce442fbeb9a1521314b82804293159fd7df4db66b78a06fe93e705bbc4e0d294a787c3cbf271b2acd15e7b4998c822f7724d3191e2265bd0d694dfb08063c9ff26a424884b46e26b5560d756c114ad1a7b92eee3f49dc2883b604ecc49c5ce92ce467778301326588a6577d44758e8d90710248d110dbf3d3d568779bd1c616369f84619dd089e38b51634f7c5d2ac9f1547a342877815a3864ad70b68b196bde9d810512f411d5235633ef65088788dfa3f152df7cee3a0803f6ac7ae192301dec07ff870ff3d7cf1c09cc9093263b225d01222376531007af9e6fb96e5ccaa8274f70adc786db7f33a20a752717b56b9a03bfce15a1aacd78c4adf8bdf41de8aaf421684c27526088c54322b5eea9175ef9c574c1f873218cc6f5df233892d7d5b0b0649ffc5a1c4909f2967a8c1f15b419ecde0448f071fa71e553f4f12cfa5e35022e75ddc5509edddc3de82d9097759b27f7c24776702e0ff64559281f796f11c1a9c77a156f390d2d18d1759b6be0347eb5bb4df912e9cfafa0db3be3243bacb378ca0946cece695a8099d6d7a24fc8bcca4c09695e3208f17f00bf404f6eb7852dfe73c163a19fd4e890e0edd5c7a727984b6f47a952373b95200bba061756c699c218b52c265b22bcd5cb24fdf056621fdd2126cede171e435320ca34e56e4c82a2afc9a59d3bf4647877658b6f23a6484f37acd8e2e184926993b5d1bbe6cdba64f486b4fb41bb94a644140540894f8fc14e585bc8beae88eabf926add289c82eb8cea99743baed842d76eb5c5573f7a7f3f2693960d6bfed697b5619afd942f41689dbd281a35e32478ba3a388dada82a2f4164481aa6a8f3946a84ea6186b20ce388c202be42996ae90feec7258d4a4a276353df84c96b160ac003d81cf395c0e61b0f0a9e692c32fab307f754cae5de7716a00cb96160cd39c931f4885d612862cecf6ba76502c9d266f97e4cf6cf0a16f787788e5471458a0dc24d3f2a28caa0f7ee00cf8bb113bd9c2b086037d765b5ec9a849df6f482fc01b48261e44299b0bc88321d837b6e2d221ebf2996b4140cd82e531de27f8de445f31c64469a5a145b031cd2569d19e27369c31ec63a989f0c9aaba7cc9d36d652001d40004f83a90d6465854f31bf15d1ef6bff4c02d60b948a37e3f50d250d7f85f545f507014aae5a35908283168c034f654acbb9d0fc261671d612e3d74261653e69e5e9cf7c8fda298b4d6c879cbbb97eafe648ba70150599089d65c1fdc0d5af879a2d46a443ac6dd21b33f72510742db4faf7eeb1580580ffe26e2d5ff", 0x1000}, 0x1006)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000000)={0x1, 0x401, 0x4, 0x8, 0xd, 0x8, 0x100000001, 0xff, 0x1, 0x3})

23:09:25 executing program 2:
r0 = getpid()
r1 = syz_open_procfs(r0, &(0x7f0000000300)='clear_refs\x00')
syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x1000, 0x400000)
sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x0)

23:09:25 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001900030500000000000000001c140000005715007be7bb3b731c9ee1aa7df505b98533eac52229b9b8143db3a02d6e4e18cc4e7aa166180330d22dc11d459863ed77a3ee358555f526162960e7a6a3c5a4fff321ed7a05004a9cdbafabd550fb45999dee7c5653de31d801db5ae791ac3c6d90e7825a530644ec3d"], 0x1c}}, 0x0)
fcntl$getown(r0, 0x9)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000001c0)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, 0x0, [], 0x7fffffff}, {}, {0x0, 0x0, 0xd4af}]}})
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x1, 0x4000000000000002)

23:09:25 executing program 3:
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x101840, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x6, 0x5, 0x9, 0x8001, 0x800], 0x6, 0x8001, 0x0, 0x0, 0xfffffffffffffff9, 0x8f, {0x8, 0x6, 0xfffffffffffffffd, 0x4, 0xb5, 0x7, 0x6, 0xff, 0xff, 0x54, 0x9, 0x5, 0x8, 0x6, "0e672fc2760fd7a82830c56bdd7fbc032bee1069d4949ee69fde4af04f93e109"}})
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={<r1=>0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000280)=0x98)
r2 = syz_open_dev$amidi(&(0x7f0000000600)='/dev/amidi#\x00', 0x9, 0x800)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000640)={r1, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr="f07c6f1f2b458219ee0c3ed6196cc0cd", 0x4}}, [0x40000000, 0x7, 0x8df, 0x3, 0x9, 0x6, 0x9b, 0xfffffffffffffff7, 0x400, 0x10000, 0xf9, 0x1ff, 0x3f, 0x1ee000000, 0x1]}, &(0x7f0000000740)=0x100)
rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x1ff})

23:09:25 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getresuid(&(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000300), &(0x7f0000000340))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC=r3, @ANYBLOB="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"])
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:25 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000000)={0x3ff, 0x9, 0x4, 0x0, 0x9, 0x582, 0xffffffffffffffff, 0x0, 0x101, 0xc2, 0x6, 0xffffffffffff2465, 0x0, 0x9, 0xae4, 0x7f, 0x0, 0x5, 0x101})

23:09:25 executing program 1:
r0 = socket(0x2000000000000021, 0x2, 0x2)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x28)
r2 = msgget(0x2, 0x100)
ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000340))
msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000240)=""/228)
io_setup(0x1, &(0x7f0000000100)=<r3=>0x0)
io_cancel(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)="714e97c539a88f4625be7cf4017c4d370207a73c4283009e4f049e3309a667837699bc9ea4af9aa43ebf6377a4e22711678b32bcc94a468b12ace6c106391ea348b008b7f67376b8", 0x48, 0x7c19df0000000000, 0x0, 0x3, r1}, &(0x7f0000000200))
write$UHID_SET_REPORT_REPLY(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xf5)
read$eventfd(r1, &(0x7f0000000040), 0x8)
sendmmsg(r0, &(0x7f0000005940)=[{{&(0x7f0000000080)=@in6={0x21}, 0x80, 0x0}}], 0x1, 0x0)

23:09:25 executing program 3:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1000000040000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x21, 0x0, 0x0, 0x740000, 0xf7ffffff7fd0bdbe})
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4008550c, &(0x7f0000000000))

23:09:26 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getresuid(&(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000300), &(0x7f0000000340))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC=r3, @ANYBLOB="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"])
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:26 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0xbe9563fb67384434, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x2000, 0x0)
ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x1f, 0x67, 0x1, 0x2, 0x2, 0xb966, 0x5, 0xc9f, 0xe79, 0xffffffff, 0x2, 0x2, 0x7, 0x6, 0x0, 0xc}})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x46, 0x200)
ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f00000006c0)={"ce23782f68d07098636d1ea9589d0331de4b4d661b204b0ba57169eb00aefe3c4b0eae04668cf7ae651e492cfce6eb1beb4ad8bfdfac8484b56b08d308a0a3d5d4ad4dc2fb4d5749e05a7acb07d6084cad95f8355df8290d7de5d46c45870d42207a892e10342a13c4ce3063fee70dd674d82720d2e4072499ce3a8cd24a0ad0b3068868b9cf6f26d7ce2ac649fa4064313380729d9a6c5e5547d0ad0b2bc85ac96f39fe4623bb825878a09977a4b8fc477838cd13022a853464d8e5bf3f2811436f0c6ec9a151e6dee9a7c2143aeff6f22ff898eb8e3d8fc350392d4a23a1c2b9e083008ad58795ae6907dbc462f1cf5623d9f0859cbc37ad86e96e62b2babbdf5c9b06edd5c4ea0ebc5cc1d7cb28c6173a1c0f3fdb6420c92e957dffef52837c69764a16a36cfeb042c593a6b591e78726f0bac56f1dbed9747f629d93257f4d050c54d7a3039bdb16f93bc166ebc6afb4127f00890a5de414195b2f9306b9f5d5f1b409c4bb7365015950afb988d66512332f64b8602ab9a71a0e97235fe2f5b89f312caba2686d8a13eaa836d05c33a9df799067c7320bcd6a97b4fd4fdc6084fb02db83bba1b9b8a8b33a908504b572e30bf383100f1e4e6342d167b270f2e9d7bdc1bffd5d7218ef3c7fd77a4aae3d011806d0a4ae5c6f948b191c46c94415b1c04a91e73c7f13a9387a6789354eb0625d56a6be69893707c83cb2aeae48d489d3090c689bac44caca2381d1e8b7fcb8d7e8db7a578caaa1d0b2db8367a53aede1365fa8ae61ee479190f346aac4b6e9398eb4cbf3ee76355c279296ed45a2a9bc13a94f3c064cf42f14d5640da2c5448d4ee269d5ff697a8f15ec07b9e927e47b507021e404423b0cd554cf60e4ceed59feaef6d4e514169abb5b66c54803d317f4833e4b2ccd787edeb02f58d3755e1b8a4b0ca40a816cdac6e7b1a88c8698716ebc4afc7258b959fa049038868d25ee3b47d3a67e3fa1f4401e97d4de4fb16229de3e2649190aaaa2c8e4962bada4c18689a82d5037a5bbe875f77b7c8636de86598077fcc4874f5ab6ef3d8450c1b46342c252a488aea980122817e229d17f6df4aef52780a29cd534929c0085298a0a4b921458c36b827939c15940346db60aa1d276969dd2d97073ee6bfe9b1c91b53176ff8a47b6740f16497a5df652f9bf1862ed101e932f58d0e0fcc2f0bb57e1ce90446a3dcb316312cd77925b2b525a3eb21ef405362356b491eb9d5f7fbd604cb6414d7a8c52af415380a3aa62930f90957dfbd5cfdc09d9193f3ac86571aa1a028c5039224f22e14c0b6fcdb120817612bb591c016c64d14495bca5e1c80474763fd2630dc21db578f63ae0ddd5a8c41e38b8b26e05aca048517cf85d488589c034dee84b3655453151213f974df856e6dbd72fb03523afa70349e71eeadcd536e100"})
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0)
getsockname$netlink(r0, 0x0, 0x0)

23:09:26 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
setxattr$security_smack_transmute(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x1)
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)

23:09:26 executing program 4:
write(0xffffffffffffffff, &(0x7f0000000180)="8a", 0x1)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000280)={0x17, 0x1e, &(0x7f0000000240)="61c518c7187684178a5e286916960e445824f1fe6ba36c68daaef922ba68"})
accept$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf0ffffff}}, [@migrate={0x10c}]}, 0x15c}}, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x80080, 0x0)
ioctl$TIOCNXCL(r2, 0x540d)

23:09:26 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0xa00000000000000, 0x40002)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x0, 0x2)
ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000200))
syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x6, 0x101002)
write$evdev(r0, &(0x7f0000000000)=[{{}, 0x21, 0x67, 0x4000000000000002}, {}], 0x30)
ioctl$RTC_UIE_OFF(r0, 0x7004)
r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x59, 0x40)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000100)={'icmp6\x00'}, &(0x7f0000000180)=0x1e)
r3 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000080)=0xfffffffffffffff9, 0xfffffffffffffecd)

23:09:26 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:26 executing program 5:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4003, 0x0)
ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000040)={0x1, 0x10000, 0x3f, 0x1, 0xb, 0x6})
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x4800, 0x0)
fsync(r1)
bind$isdn(r0, &(0x7f00000000c0)={0x22, 0x4, 0x7, 0xffff, 0x7}, 0x6)
r2 = fcntl$dupfd(r1, 0x406, r0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x3})
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00')
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x6ad}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xa78f]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffffffffe00}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x9, 0x1, 0x100, 0x1]}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x0, 0x2, 0x0, 0x6, 0xfff]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40400d0}, 0x44)
ioctl$int_out(r0, 0x0, &(0x7f00000002c0))
ioctl$FIBMAP(r2, 0x1, &(0x7f0000000300)=0x1)
setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000340)='vmnet0\x00', 0x7)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000380)={<r4=>0x0, 0xb4, "e4f5396a9edc15703037913132e38d5153dfa95489fb4cb3a7f9055c960e1fdaf6085479fa22eadc4e12236c15f86e063d4f2c824b6110de4de5f0b237acee443409b451d111a199d9cd11e60c6c61f4c42bf01efb1fec3b2d080c2ef5bfb4778c4f8eb63a38717912dcc6089c5749e660a30bd561abb6e4909090eb49b48de9b4e64613b5fe42bbb34fd7db6face296e77373ffec365eee16e8e630fd9d06b4f1695ce39c19736fc834980263c64197f9a276bc"}, &(0x7f0000000440)=0xbc)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000480)=r4, 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000004c0)={0x5, [0x0, <r5=>0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000500)=0x18)
ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000540)=0x3)
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000580)="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")
times(&(0x7f0000000680))
r6 = socket$inet6(0xa, 0x80005, 0x3)
link(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='./file0\x00')
ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000740)={'gretap0\x00', {0x2, 0x4e22, @local}})
r7 = fcntl$getown(r1, 0x9)
r8 = syz_open_procfs(r7, &(0x7f0000000780)='fdinfo\x00')
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800)='IPVS\x00')
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r9, 0xb09, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80)
getsockopt$inet_dccp_buf(r1, 0x21, 0xe, &(0x7f0000000900)=""/24, &(0x7f0000000940)=0x18)
ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e)
write$apparmor_exec(r8, &(0x7f0000000980)={'exec ', ']keyring\x00'}, 0xe)
ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000009c0)={0x3, 0x0, [0x5, 0x9, 0x100000001, 0x1, 0x7fffffff, 0x3, 0xfff, 0x86de]})
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000a40)={r5}, &(0x7f0000000a80)=0x8)

23:09:26 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x2cf, 0xeffffffffffffffc)

23:09:26 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20000002812, r1, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='g'], 0x1)
mmap(&(0x7f0000004000/0x4000)=nil, 0xa07000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

23:09:26 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:26 executing program 1:
creat(&(0x7f0000000580)='./file0\x00', 0x0)
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0x0, 0xee01, 0x0)
r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$setperm(0x5, r1, 0x1000002192c04)
setresuid(0x0, 0x0, 0x0)
setregid(0x0, r0)
setgroups(0x0, 0x0)
add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, r1)

23:09:27 executing program 3:
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0)
ioctl$BLKPG(r0, 0x40140921, &(0x7f0000000000)={0x0, 0x1f, 0x0, 0x0})

23:09:27 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x800, 0x81)
ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000040)={0x3, 0x8, 0xffffffffffffff08, 0x8, 0xffffffffffffff80, 0x80000000})
sendmmsg$inet_sctp(r0, 0x0, 0xdb, 0x0)

23:09:27 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_pts(r0, 0x80000000006)
r3 = dup3(r2, r0, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000200)={0x0, 0xfff})
write$UHID_INPUT(r3, &(0x7f0000001640)={0x300, "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", 0x1000}, 0x1006)

23:09:27 executing program 1:
creat(&(0x7f0000000580)='./file0\x00', 0x0)
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0x0, 0xee01, 0x0)
r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$setperm(0x5, r1, 0x1000002192c04)
setresuid(0x0, 0x0, 0x0)
setregid(0x0, r0)
setgroups(0x0, 0x0)
add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, r1)

23:09:27 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:27 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='auxv\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x10000, 0x0)

23:09:27 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fc, &(0x7f00000003c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)

[  361.909838] IPVS: ftp: loaded support on port[0] = 21
[  362.010588] chnl_net:caif_netlink_parms(): no params data found
[  362.064014] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.075499] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.089606] device bridge_slave_0 entered promiscuous mode
[  362.098888] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.105690] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.114254] device bridge_slave_1 entered promiscuous mode
[  362.139975] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  362.151086] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  362.187596] team0: Port device team_slave_0 added
[  362.195703] team0: Port device team_slave_1 added
[  362.266271] device hsr_slave_0 entered promiscuous mode
[  362.312423] device hsr_slave_1 entered promiscuous mode
[  362.367379] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.374414] bridge0: port 2(bridge_slave_1) entered forwarding state
[  362.382447] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.389437] bridge0: port 1(bridge_slave_0) entered forwarding state
[  362.449551] 8021q: adding VLAN 0 to HW filter on device bond0
[  362.466623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  362.476783] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.485652] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.494494] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  362.511405] 8021q: adding VLAN 0 to HW filter on device team0
[  362.525287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  362.533780] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.540379] bridge0: port 1(bridge_slave_0) entered forwarding state
[  362.554940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  362.563423] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.570057] bridge0: port 2(bridge_slave_1) entered forwarding state
[  362.597064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  362.607371] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  362.623483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  362.637802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  362.656490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  362.669990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  362.699964] 8021q: adding VLAN 0 to HW filter on device batadv0
23:09:29 executing program 1:
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0xfffffd82}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x2000000000000148)

23:09:29 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x24}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
connect$l2tp(r1, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0)

23:09:29 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
r1 = getuid()
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:29 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:29 executing program 2:
r0 = syz_open_pts(0xffffffffffffffff, 0x80000)
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000080))
vmsplice(r1, &(0x7f00000005c0)=[{&(0x7f0000000100)="157d3b8c4737507376904b064e299c65e9c4e8de6ef10261505fc580174ab7694cb258a7a2cf01aa7d53d85fddeb7707b5e7d133a09c026fd7acffe358a6231f16c6942fa0e297e62a7f637f4b31ed76ce1b02fc9233b1e3e3df7fe627b906a52040ab7a3c4d234c0e1f44012079a2598c87ffd3182c91a101986af884b5158acbb4d5b4a78989bebee64579914ea8e37cbb0e1636b4ddc3c11949c8ee3c7d6008fd0cda5e5bc8aabb407537b08f6e2f4f56e733e3a11dd5ab1fb0cb9bae7b221c74aa0a0f86", 0xc6}, {&(0x7f0000000200)="9ada6b05dfa9e76279ea7e67996f445686431b7621242889c6e753179c5217c1d8df105e8ed529a875f01da003711b8d70e14821e2b966736fdb30c589b0467948873b1f689c6fd0edb1d85fcb", 0x4d}, {&(0x7f0000000340)="6d8388f6105df19b9b077a47bdaecf116747ac96617e29be49a36660d22425d8943e0dc68f04c104b385bbe563038a9ae6ec80e86a9e74198691858b8065221010911aaa4c17406a8372573587eb9b8bf65326ce35b9d3aeb441927c200e14e6799364653e33cd18a09e17c22ad869fb97b08f524031c4e9a04b48164a41775503ea9dcdd458276022850d48c3d4c55efb5b4ac309fb4090d319", 0x9a}, {&(0x7f0000000400)="d9dcc21e9fb3fbbba1c7ac94f1568d75c97106ac299e411dac14fa8c88ce15d98c2e61405f218d95d05d737381899ee639ea36e1ac8b6aae395a41ec7ded6001e2f20560aca69ed5feb3eaadbb36f73d812a9f1ffa2d9eebe53c68ef86bd3dd16f982cc5fdc39e927a927837f982f33596925379685cfebf4ba7047f3db6c2090a7cf4e849e3f62f6ce8835e1e275c73142fbcc8638c5b7c3e584dab018fdcdb28cb7a4c7fa9a49a30b3f25413d9bcdcf3dcb25c16df4447b200045361e14937e83bfb50766a70", 0xc7}, {&(0x7f00000002c0)="86075be362", 0x5}, {&(0x7f0000000500)="68bed97150dc45e9b5e9d43eb3c499af16fa7b08357660478b7dd0eb2aae306bf7b98235cfbb4b2742621e1841faa7b7a4dee18204c9ae1c803c4e55ac3113e8fc0620bf2d9e142e4eac6809821f17ca0970a5ad5456a778c9d0402f579f974a15a7baf07036784d18828ab83d7ca9fa0380a99ac8e80f41584ec7db4828ab9e327b975c350c044e09d1e19f", 0x8c}], 0x6, 0x1)
pipe2(&(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x4000)
dup2(r0, r2)
ioctl$CAPI_NCCI_OPENCOUNT(r2, 0x80044326, &(0x7f0000000040)=0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r3, 0x0, 0x0, 0x0)

23:09:29 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1b)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000))

23:09:29 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
r1 = getuid()
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  363.139104] binder_alloc: 12778: binder_alloc_buf, no vma
[  363.146182] binder: 12778:12781 transaction failed 29189/-3, size 0-0 line 3035
23:09:29 executing program 1:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket(0x200000800000011, 0x3, 0x8)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'lo\x00', <r4=>0x0})
setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f0000000040)="8ac6f6db", 0x4)
bind$packet(r3, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a52e)
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)

23:09:29 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000004c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
r0 = syz_open_dev$vcsn(&(0x7f0000001a00)='/dev/vcs#\x00', 0xfffffffffffffffb, 0x80000000000000)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff}}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000280)=""/71, 0x47}, {0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f0000000440)=""/117, 0x75}, {&(0x7f00000015c0)=""/90, 0x5a}, {&(0x7f0000001640)=""/87, 0x57}, {0x0}], 0x8, 0x0, 0x0, 0xa0}, 0x0)
ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000640)=@add_del={0x2, &(0x7f00000000c0)='syzkaller1\x00'})
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000600)={0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}]})
ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000900)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10)
setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0)
ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x100000001)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000000840))
mq_timedreceive(r0, &(0x7f00000006c0)=""/101, 0x65, 0x200, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000880)=@assoc_value={0x0, 0x8}, 0x8)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000680)='/dev/rtc0\x00', 0x40000, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x0, 0x0}, 0x10)
pipe2(&(0x7f0000000a40)={<r2=>0xffffffffffffffff}, 0x4000)
socket$bt_bnep(0x1f, 0x3, 0x4)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
alarm(0x1ff)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$sndseq(r2, &(0x7f0000000a80)=[{0x0, 0xd0, 0x10001, 0x0, @tick=0xff, {0x40, 0x7f}, {0x4, 0x59}, @result={0x435}}], 0x30)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x4000, &(0x7f0000000000))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  363.262199] binder_alloc: binder_alloc_mmap_handler: 12778 20001000-20004000 already mapped failed -16
[  363.295633] binder: BINDER_SET_CONTEXT_MGR already set
[  363.301394] binder: 12778:12781 ioctl 40046207 0 returned -16
23:09:29 executing program 2:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x9, 0x88000)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x2, 0x40)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000001c0)={<r2=>0x0, 0xa1, "a42d72a44ed98e4936e40df0a1384d9b0ccda99ef707f9a342fc0dcbefaf5d4e296dbcb686a3a320a6cc9f01549e4a9d3ba5b9a1b64e3495027a6472d4eb79ce1c025b6c90d0417b88d32c82e6fbb6aab5ba539f2c9632adf805b0b7bd9c5dd1c2cecb76bb45fa628f6b85fd616c2ccfecc42a345a891262ba00f8ee851b91181418567a9816ed4dff4488c5c85dd96f9d90d37b114108f55eca6ca4c328a01571"}, &(0x7f0000000280)=0xa9)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r2, 0xea91, 0xfff}, &(0x7f0000000340)=0x8)
read(r0, &(0x7f0000000080)=""/203, 0xcb)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r3=>0x0)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000380)=0x1bd6, 0x4)
syz_open_procfs(r3, &(0x7f0000000300)='clear_refs\x00')

[  363.420458] binder_alloc: 12778: binder_alloc_buf, no vma
[  363.426481] binder: 12778:12792 transaction failed 29189/-3, size 24-8 line 3035
23:09:29 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
r1 = getuid()
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  363.474934] binder: 12778:12781 got transaction to invalid handle
[  363.481678] binder: 12778:12781 transaction failed 29201/-22, size 0-0 line 2896
[  363.500579] binder: release 12778:12781 transaction 2 out, still active
[  363.507961] binder: unexpected work type, 4, not freed
[  363.513586] binder: undelivered TRANSACTION_COMPLETE
[  363.556139] binder: undelivered TRANSACTION_ERROR: 29201
[  363.562131] binder: undelivered TRANSACTION_ERROR: 29189
[  363.567831] binder: undelivered TRANSACTION_ERROR: 29189
[  363.573669] binder: send failed reply for transaction 2, target dead
23:09:29 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0xffffffffffffffff)

23:09:29 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  363.876442] binder_alloc: 12806: binder_alloc_buf, no vma
[  363.882430] binder: 12806:12810 transaction failed 29189/-3, size 0-0 line 3035
[  363.931353] binder: release 12806:12810 transaction 9 out, still active
[  363.938699] binder: unexpected work type, 4, not freed
[  363.944188] binder: undelivered TRANSACTION_COMPLETE
[  364.029375] binder: undelivered TRANSACTION_ERROR: 29189
[  364.035794] binder: send failed reply for transaction 9, target dead
23:09:30 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:30 executing program 4:
sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x10c, 0x0, 0x0, &(0x7f0000000380), 0xfffffe56}, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000180)=""/246)
readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)=""/88, 0x58}], 0x1)
pwritev(r0, &(0x7f0000000080), 0x30b, 0x0)

23:09:30 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:30 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=<r1=>0x0, &(0x7f0000000040)=0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={<r2=>r1, 0x90, &(0x7f0000000080)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e20, 0x5, @empty, 0x3}, @in6={0xa, 0x4e20, 0x0, @rand_addr="74fbe2ec25f23c37d733bb6c51c930ca", 0x7f}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0xa059, @rand_addr="038b876792822462763656c223642ca6", 0x3}, @in6={0xa, 0x4e20, 0x3, @rand_addr="0a9f0cddc2356e4ecca60ee8004304aa", 0x3f}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e20, @broadcast}}, 0xffffffffffff7fff, 0x100000000, 0xffff, 0x3f, 0x4}, 0x98)
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)

23:09:30 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040))
write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r1, 0x3, 0xc002, 0x80000003)

23:09:30 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
mknodat(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007fc0), 0x40000000000002f, 0x0)

[  364.534479] binder_alloc: 12823: binder_alloc_buf, no vma
[  364.540356] binder: 12823:12828 transaction failed 29189/-3, size 0-0 line 3035
[  364.580007] binder: release 12823:12828 transaction 14 out, still active
[  364.587780] binder: unexpected work type, 4, not freed
[  364.593299] binder: undelivered TRANSACTION_COMPLETE
23:09:30 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, 0x0)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
flistxattr(r0, 0x0, 0x0)

23:09:30 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x7fffffff, 0x4)
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)

23:09:30 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x40, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
close(r0)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4)
getpgrp(0x0)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
fcntl$lock(r1, 0x0, 0x0)
ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

23:09:30 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  364.798257] binder: undelivered TRANSACTION_ERROR: 29189
[  364.804167] binder: send failed reply for transaction 14, target dead
23:09:31 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="2c646f6e745f6d6561737572652c7375626a5f726f6c653d2f4070726f63242e25657468302973656c662daa2c61707072616973652c646f6e745f6d6561737572652c736d61636b66737472616e736d7574653d63657068002c0000cb3f5c763021fc54c5ee2b1dc2a3a294d00ec0fd22f28e83564cc0bb324c0a7536f6e7e212b03272d87d235ac22cd764505f6d6442aa01bcbc0b9f5119df59e8c559047468d076aed22934124653a874ff164345cc1a4561994805fac00f2e26970747694b5010cae29a15759b6f4817cc122f119ce494b65fbf8ee10761222aa7102db470f4f8d7ec45bbea3da23a059b811436caf839b71965dc618f738f8ecb7bf244a79b8210d97ae40f8ac15d22644e26a62c5599a46b6fb06f30"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:31 executing program 3:
r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0x100000073)
read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

23:09:31 executing program 2:
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=<r0=>0x0)
syz_open_procfs(r0, &(0x7f0000000100)='numa_maps\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x400081, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)=ANY=[], &(0x7f00000001c0))
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x8}, &(0x7f0000000240)=0x8)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={<r3=>0x0, 0x2}, &(0x7f0000000040)=0x8)
ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000080)={0x0, <r4=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000002c0)={<r5=>0x0, 0x80000, r2})
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000400)={r4, r5, 0x100})
mknodat(r2, &(0x7f0000000280)='./file0\x00', 0x400, 0x1c)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYPTR64=&(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYRESDEC=r3, @ANYBLOB="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"], @ANYPTR], 0x2)
syz_emit_ethernet(0x4d0, &(0x7f00000005c0)={@dev={[], 0x27}, @broadcast, [], {@ipv6={0x86dd, {0x7, 0x6, "eaf534", 0x49a, 0x2f, 0x3, @empty, @empty, {[@dstopts={0x0, 0x30, [], [@jumbo, @ra={0x5, 0x2, 0x9}, @enc_lim={0x4, 0x1, 0xd20}, @generic={0x80000001, 0x6e, "c6a4a25f42e7c76e916464c84def8394a9c461f21d2ad406c7a108af59d2ee42c93f272f080b467b08fe7a54691534f5f4c320eb491ca067cee0387bd5cca42955eb094026c59f4c94b0d2bbf3c3cf2eed28fc61a7b161c1ecb83a5ce839a9e978fc2a49004ed98948204c7ce5ad"}, @jumbo={0xc2, 0x4, 0xffff}, @generic={0x8001, 0xfc, "4e287f96fdcda277b8d3668ef5b0f371ba9f808dc7664729c3d9f3435db589dbb4069eef7b34d0e6dcf71c9c57f676ddc565d3b3297283430c058470eef2adea2e1a22f1fb785b12c01030b939f103a9b1a0996cdcc0c31153d043c4c7c1b212f96e21793fc7f1f942ee777db0d6ec62bb4e583ad65c8061b1cc2acfcdb05e5b731bec4e04bdc11c0ec4fe6690c367c5c93cd404bd11dddf83e194fdb0b5b5d59c7ad665afe57b4567c69d77a78b64a7782f1b5a76bfabc1ddc2484856056568a8a4e1d503f19135170e4633d60f17162e6218a3e01e1f39a016cbf3a93c63865d9302f6e96bd9e14bc5c8fc708608f5f88f480d41254a0f8303171d"}]}, @fragment={0x2f, 0x0, 0x8, 0x86ca, 0x0, 0x8, 0x67}, @dstopts={0x3b, 0x8, [], [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}, @generic={0x0, 0xd, "e8628b1145cee2d8e8775d3750"}, @generic={0x7, 0x13, "226f853209393e1c3a6d91ef5dd0bcb3d9e24b"}]}, @routing={0x2d, 0x4, 0x0, 0x9, 0x0, [@dev={0xfe, 0x80, [], 0x25}, @rand_addr="d481ef64700ce7f8971d0c1d2a080d43"]}, @hopopts={0x7f, 0x1, [], [@pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}]}], @icmpv6=@param_prob={0x4, 0x1, 0x0, 0x2, {0x7, 0x6, "86f9b7", 0x6, 0xbf, 0x8, @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [@routing={0x0, 0x10, 0x1, 0x3, 0x0, [@remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, @remote, @mcast1, @mcast2, @local, @remote]}, @fragment={0x3f, 0x0, 0x7, 0x100000001, 0x0, 0x2, 0x66}, @srh={0x7f, 0xc, 0x4, 0x6, 0x0, 0x0, 0x0, [@empty, @local, @mcast1, @mcast2, @dev={0xfe, 0x80, [], 0x15}, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x11}}]}, @srh={0xff, 0xe, 0x4, 0x7, 0x4, 0x18, 0xe37, [@dev={0xfe, 0x80, [], 0x2b}, @empty, @ipv4={[], [], @rand_addr=0x3}, @dev={0xfe, 0x80, [], 0xc}, @loopback, @mcast2, @mcast1]}], "20dfdfa5ddcdd48f39a874207eea080b2e0e0981d28b3347d1c2d81a68bc7173dad2340a64286c5c32d43b41a298b495f1661d473b8f0b563d7b82e9710d7c1b2100afd286a97e59c82f1f77a9dcd11c0cb950f6968f0449408c1db49dc28630ac43c50dfc6ca7b254739f690b6730215af9c4cbe00289c83c2e2be571ccc860f16c0749644dfe74848a0e5c1071d126531c442fe90b0e53d2d35997d7c6a58efb71882349140137ebdc79a4cf050a53a3be32aa6eb17df3ca7f7603d26bf97fc38457aa47af547859fa8e96e5c13f2093124e9562f2aac618c4"}}}}}}}, &(0x7f0000000340)={0x1, 0x2, [0xaff, 0x3eb, 0x8c2, 0xe5b]})
sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0)

[  365.120246] binder_alloc: 12850: binder_alloc_buf, no vma
[  365.126940] binder: 12850:12858 transaction failed 29189/-3, size 0-0 line 3035
23:09:31 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
readv(r0, &(0x7f0000002700)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1)
read$FUSE(r0, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x2}, 0x50)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30)

[  365.163389] binder: release 12850:12858 transaction 19 out, still active
[  365.170897] binder: unexpected work type, 4, not freed
[  365.176541] binder: undelivered TRANSACTION_COMPLETE
23:09:31 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:31 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$vivid(&(0x7f0000000200)='/dev/video#\x00', 0x1, 0x2)
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000300)={0x8001, 0x0, [], {0x0, @bt={0x3, 0xc00, 0x1, 0x2, 0x3, 0x3, 0x7, 0x7, 0x0, 0x8001, 0xfffffffffffffff9, 0xfffffffffffff000, 0x2, 0x8, 0x12, 0x1}}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000002c0)={@empty, 0x1f})
sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x6c00000000000000, 0x1400f30b}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="14d6a1f8799ca38a9794b83f4013c9d99a42a10d162c6c4b6f41843188b31400ddff00000000000000be08975fbc729d877706e61b5ff81eab7428ca6d7cb16e6cc157c095"], 0x1}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f00000014c0)=r3)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/l2cap\x00')
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000001780)=ANY=[@ANYBLOB="ddffdf00421f0ec759a98d9b5fb157c64e5b5c0b740fd74101b949f8f6086b868400e64d1458d9ca2d583f998cc5cc7be4eb7fd206856f9b103f990513f5bb04e0b509edf3e715e4f3dc3a6896c45860ed57a9d585a813a96837e19c2078362e4d5d9a2390a8c4b698b51c79f87642b328b90fbfbcb8d4d9114c158301000000a00546c0e0630ab7876e32c754028a4f3353c00e121fcd8b4654aa953ff28df78ef02caa7a9a893f395c0d48849dd3201432f9bbbd8ba3b62e42882d9b4c63ff6bd000674a807e28e8c4d1b74e73ca7fc6079f00000000000000000000000000000000"], 0x1)
ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, &(0x7f00000000c0)={0x0, 0x4, 0x1000000005})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x02', 0x1ff)
clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x401, 0x400001)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)
ioctl$PPPIOCSCOMPRESS(r4, 0x400c744d)

23:09:31 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="2c646f6e745f6d6561737572652c7375626a5f726f6c653d2f4070726f63242e25657468302973656c662daa2c61707072616973652c646f6e745f6d6561737572652c736d61636b66737472616e736d7574653d63657068002c0000cb3f5c763021fc54c5ee2b1dc2a3a294d00ec0fd22f28e83564cc0bb324c0a7536f6e7e212b03272d87d235ac22cd764505f6d6442aa01bcbc0b9f5119df59e8c559047468d076aed22934124653a874ff164345cc1a4561994805fac00f2e26970747694b5010cae29a15759b6f4817cc122f119ce494b65fbf8ee10761222aa7102db470f4f8d7ec45bbea3da23a059b811436caf839b71965dc618f738f8ecb7bf244a79b8210d97ae40f8ac15d22644e26a62c5599a46b6fb06f30"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:31 executing program 5:
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  365.407435] binder: undelivered TRANSACTION_ERROR: 29189
[  365.413625] binder: send failed reply for transaction 19, target dead
23:09:31 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  365.541125] binder: 12879:12880 got transaction to invalid handle
[  365.548076] binder: 12879:12880 transaction failed 29201/-22, size 0-0 line 2896
23:09:31 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0xffffffffffffff2e, 0x80)
setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'os2.', 'clear_refs\x00'}, &(0x7f0000000080)='nodev#]\x00', 0x8, 0x1)

23:09:31 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000001bc0)=0x168, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x10200007fb, &(0x7f0000000540)={0x2, 0x80000000004e23, @local}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x6846de70341668c9)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x5, &(0x7f0000000380)=[{&(0x7f0000000400)=""/199, 0xfffffe80}, {&(0x7f0000000200)=""/226, 0xe2}, {&(0x7f0000000340)=""/42, 0x2a}], 0x2, 0x0, 0x181, 0x200f00}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0xf43185f1)

23:09:31 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:32 executing program 5:
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  365.925547] binder: undelivered TRANSACTION_ERROR: 29201
[  366.078589] binder: 12902:12904 got transaction to invalid handle
[  366.085238] binder: 12902:12904 transaction failed 29201/-22, size 0-0 line 2896
23:09:32 executing program 3:
r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
pipe(&(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x100000073)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xf, 0x2, 0x5, 0x7ff, 0x0, r1}, 0x2c)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

23:09:32 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x4888d)

23:09:32 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:09:32 executing program 5:
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  366.455340] binder: undelivered TRANSACTION_ERROR: 29201
23:09:32 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:32 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
r1 = accept4$inet(r0, &(0x7f0000000180), &(0x7f00000001c0)=0x265, 0x80800)
sendmmsg$inet_sctp(r1, 0x0, 0x339, 0x20000000)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={<r2=>0x0, 0xff}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={r2, 0x5, 0x10, 0x0, 0x45}, &(0x7f0000000140)=0x18)

[  366.622486] binder: 12921:12922 got transaction to invalid handle
[  366.628925] binder: 12921:12922 transaction failed 29201/-22, size 0-0 line 2896
[  366.708681] APIC base relocation is unsupported by KVM
[  366.708737] kvm [12917]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
23:09:32 executing program 2:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r0=>0x0}, &(0x7f0000000040)=0xc)
r1 = syz_open_procfs(r0, &(0x7f00000000c0)='\x00\x00\x00\x00r_refs\x00\x03\xb9\x06\xa5\xdfPU')
sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x0)

[  366.830130] kvm [12917]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
23:09:33 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:33 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="2c646f6e745f6d6561737572652c7375626a5f726f6c653d2f4070726f63242e25657468302973656c662daa2c61707072616973652c646f6e745f6d6561737572652c736d61636b66737472616e736d7574653d63657068002c0000cb3f5c763021fc54c5ee2b1dc2a3a294d00ec0fd22f28e83564cc0bb324c0a7536f6e7e212b03272d87d235ac22cd764505f6d6442aa01bcbc0b9f5119df59e8c559047468d076aed22934124653a874ff164345cc1a4561994805fac00f2e26970747694b5010cae29a15759b6f4817cc122f119ce494b65fbf8ee10761222aa7102db470f4f8d7ec45bbea3da23a059b811436caf839b71965dc618f738f8ecb7bf244a79b8210d97ae40f8ac15d22644e26a62c5599a46b6fb06f30"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  366.950662] binder: undelivered TRANSACTION_ERROR: 29201
[  367.150073] binder: 12940:12941 transaction failed 29189/-22, size 24-8 line 2896
[  367.187839] binder: 12940:12941 got transaction to invalid handle
[  367.228118] binder: undelivered TRANSACTION_ERROR: 29189
23:09:33 executing program 2:
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000000)={<r1=>0x0, 0x1}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r1, 0x1}, 0x8)

23:09:33 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:09:33 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x5, 0x84, 0xff, 0x1}, 0x14)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20)

23:09:33 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:33 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:33 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x38)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0xd42, 0x400000, 0xa4})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  367.763236] binder: 12953:12954 got transaction to invalid handle
23:09:33 executing program 1:
r0 = socket$unix(0x1, 0x2, 0x0)
set_mempolicy(0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000180)=[{{&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff}}, 0x13c, 0x0}}], 0x1, 0x0, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, 0x0)
ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040))

23:09:33 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:34 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r1=>0x0]}, &(0x7f0000000040)=0x8)
ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f00000000c0)={0x800, 0x2, 0x7})
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0x39e6}, 0x8)

23:09:34 executing program 3:
r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0x100000073)
read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

23:09:34 executing program 0:
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  368.118251] binder: 12971:12976 got transaction to invalid handle
23:09:34 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080)=0x3, 0x4)
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x4000)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0xb2151a63cfe74fa1, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x100)
ioctl$KDSKBLED(r1, 0x4b65, 0x6)

23:09:34 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:34 executing program 4:
socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000100))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
unshare(0x40000000)
fchmodat(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000040)={0x3})

[  368.474885] binder_alloc: 12991: binder_alloc_buf, no vma
[  368.480605] binder_transaction: 5 callbacks suppressed
[  368.480644] binder: 12991:12995 transaction failed 29189/-3, size 24-8 line 3035
23:09:34 executing program 0:
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:34 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000))
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0)

[  368.539694] binder: 12991:12998 got transaction to invalid handle
[  368.546195] binder: 12991:12998 transaction failed 29201/-22, size 0-0 line 2896
[  368.570719] IPVS: ftp: loaded support on port[0] = 21
[  368.620234] binder_release_work: 5 callbacks suppressed
[  368.620252] binder: undelivered TRANSACTION_ERROR: 29201
[  368.631449] binder: undelivered TRANSACTION_ERROR: 29189
23:09:34 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:35 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000000)=@rc={0x1f, {0x2, 0xb434, 0x2, 0x1000, 0x8, 0x7ff}, 0x1}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="03d532b0921e909d348ceccaf2e665c37b6538ab00091159ab0610504a45e3a0304afba9914e192a5ae08c2ca00e3164b664373f9f0c17c43e90ac8c6b5580261afae08904cd4129e8eea0a3ed6dd4fbe7248db811572226da628198220c047c84619e60ff2865e3b5442219bdcebdd3a3c34fb97f5c169aa6268f", 0x7b}, {&(0x7f0000000100)="3157419b6ff64e138801a2dfdee2ca9faf81a7fd998672", 0x17}], 0x2, &(0x7f0000000180)=[{0x78, 0x1, 0x800, "36c56962ac09547aa1f9c9c147ca0447ea736f95f6a04af04f413976f995f011a23950a5b69dc5a0e9261ce2edf9f8c22be22cd5bf78a9926c131a4952edd55f86504cee625d1cf72c620258884b43fc61d26b7837de9117225fa4a011f634f885660156eb"}, {0xf8, 0x110, 0x100, "a7908949128bca4ba06c5c2cbb9cca319db29a1bdd244a4e86a50998e5aa18c3bdf5319975f536e346b9d489e9da8504a6cfa5b1f7159362110984d6e2681c4db381dc12b804a52e2f8fc924881f18d9fbdb7d646c8e9d5c5917a51563231fc17126143940d4658c82d93d0185a8c3739a18b6467a395427c28b6dcd4a1a9c01a9fcecefac52c38df7ee4d4f5aea1252d325bbdaf3399654be8e4a499a8a22f2f5b5ee16343bc68d36a74627f52c04f2976b42f8f6fbc8b2cf53dd2ada3d90231b921d1aa83d4d28f8aab0cc651f152ba03f3bd41b23626914520fa6cc8ec3ba58a679ef"}], 0x170}, 0x40)
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0xffffffffffffffff)

[  368.914347] binder_alloc: 13014: binder_alloc_buf, no vma
[  368.920012] binder: 13014:13015 transaction failed 29189/-3, size 24-8 line 3035
23:09:35 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x38}], 0xf, 0x0)

23:09:35 executing program 0:
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  368.989540] binder: 13014:13018 got transaction to invalid handle
[  368.995994] binder: 13014:13018 transaction failed 29201/-22, size 0-0 line 2896
[  369.089998] IPVS: ftp: loaded support on port[0] = 21
[  369.103449] binder: undelivered TRANSACTION_ERROR: 29189
[  369.111023] binder: undelivered TRANSACTION_ERROR: 29201
23:09:35 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xffffffff80000001, 0x4)
bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)

23:09:35 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:35 executing program 0:
mkdir(0x0, 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:35 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000000)={0x2f, 0x2})

[  369.432405] binder_alloc: 13038: binder_alloc_buf, no vma
[  369.438130] binder: 13038:13040 transaction failed 29189/-3, size 24-8 line 3035
23:09:35 executing program 1:
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @random="0847417aef47", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x11, 0x0, 0x0, @multicast1}}}}}, 0x0)

[  369.490572] binder: 13038:13045 got transaction to invalid handle
[  369.497109] binder: 13038:13045 transaction failed 29201/-22, size 0-0 line 2896
23:09:35 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0})

[  369.582396] binder: undelivered TRANSACTION_ERROR: 29189
[  369.594016] binder: undelivered TRANSACTION_ERROR: 29201
23:09:35 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001b40)=@allocspi={0xf8, 0x16, 0x311, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@local, 0x0, 0x6c}, @in6, {}, {}, {}, 0x70bd25}}}, 0xf8}, 0x8, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)

23:09:35 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  369.804642] binder: 13053:13058 transaction failed 29189/-22, size 0-8 line 2896
23:09:35 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0xa, 0x4})
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000340)={{0x6, 0x5, 0x3f, 0x6, 'syz0\x00', 0x400}, 0x1, [0x800, 0x0, 0x0, 0x100, 0x8, 0x40, 0x6, 0xd69f, 0x9, 0x480, 0x87, 0x10001, 0x1ff, 0xfffffffffffffffd, 0x1, 0x4, 0x81, 0xfffffffffffffffe, 0x8, 0x1ff, 0x9c, 0x10001, 0x1, 0x40000000, 0x3, 0x5, 0x401, 0xaa0, 0x9, 0x3, 0x1000, 0x2, 0x1, 0x4, 0x80000001, 0xaa44, 0x9, 0x4, 0x800, 0x1f, 0x6, 0x7bf, 0x2, 0x2, 0x81, 0x20, 0x1, 0x9, 0x7, 0x80000001, 0x0, 0x200, 0xfffffffffffffff8, 0x1ff, 0x4, 0x3f, 0x3a, 0x9, 0x7b5, 0x4, 0xffffffffffffec1c, 0x2, 0x0, 0x1fad, 0x8, 0x148, 0xbe1, 0x7, 0x1, 0x6, 0x6, 0x10, 0x0, 0x8, 0xdb, 0x5761, 0x2, 0x129, 0x8, 0x7f, 0x80, 0x5, 0x14, 0x8, 0x10000, 0x8, 0xffffffff00000000, 0x6, 0x7f26, 0x2, 0x8, 0x1f, 0x7, 0x0, 0x7, 0x6, 0x0, 0x6, 0x0, 0x7243365b, 0x8, 0x466, 0x6d80c194, 0x8000, 0x100000000, 0x2, 0x4, 0x8, 0x37f9, 0x81, 0x0, 0x3, 0x1, 0x800, 0x7, 0xfffffffffffffffe, 0x1ff, 0x16, 0xed, 0x8, 0xd52, 0x6, 0x7f, 0x7d00348c, 0x7fff, 0x6, 0x4a61, 0x4000000000000], {0x77359400}})
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001a40)={<r1=>0x0, 0x5}, &(0x7f0000001a80)=0x8)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000001ac0)={<r2=>0x0, 0x6}, &(0x7f0000001b00)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000001d00)={<r3=>0x0, 0x1}, &(0x7f0000001d40)=0x8)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001f00)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000002040)={&(0x7f0000001ec0), 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa8, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100000000}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x14}}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x81}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x80)
sendmmsg$inet_sctp(r0, &(0x7f0000001e40)=[{&(0x7f0000000040)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000080)="9e7353280b9037313af9533d4b72e9c00e2e1e7101d8d8c907f12e48f63e8eaa55dbf0926e26ad21848fdb3fa52a65c1a568e436e6dbf288408894fdadef057a97588e5fdf40f1d19c8222ac1348e303d9c289f091d0f7a27a33570f38cb74019b4ef1f0c06fb3ae3fcd91614575d7e0d3bc7678979507454135e450a216fd0def21f0611932269ebcb76002ce96131ac5016a6415d7d9b0e5755ea3a832ffebc7342adc88df4341da2edc9cdc61e1cb9cca667a9dfc9259b68ca5985db6f9e9", 0xc0}, {&(0x7f0000000140)="e922548414e57596b59f", 0xa}, {&(0x7f0000000180)="b010348cbaa5fbc32865f8142d32d774f5c0ed54ee0ca2a6f9d46057b58c742b86dfd6012df26e8c07f6fc46bdaaab2c59d2b7b316c8af1cc783f96024e9d5baa258fb5913ce1f644710218e3a61662d0d02a9d24050e050208a4e4d0f66bea4be731cd8478bac63ad45e880622e8788ca337fd798e931f372eff76d390fae", 0x7f}, {&(0x7f0000000200)="4a52dc94be7a3158f1f67848ef053ac48ef652af5076a1a70bd816c6f05c5ad38aa33a2957a5bf4f24f6f7bc19721c432b1e5c2cdc101837bcdcbb0591abfec577b7bc227e7ae69391cb766ad7e76230b34affd4b653a1955d5257", 0x5b}, {&(0x7f0000000840)="f7d3aac8cac64df542c1200f4196173e41fd5b783469eeb935e268bb994d9505c1cc645675e37ba648981f34a37be5ed64e538256c90932268112ebfb5d7eef1dab1b7031c93a474197b8dbc27f0976114becca92a67b383be7f89b6e5e4baea860b141ad9b9d2662e226c3f4d9ff199ec141d2417e770b1a40416c34d415e3b047302b770549b0dceee4ac14471caa7353755a6f67b1ffc7e644e22d9db7312239d545e99f6160be67ab93911eed04ca21b8355e214c6f97485953d686108fd3358", 0xc2}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="bafd59b27314ed303b367e17b74dedc5e69ef5c1a368be4d573283d9c8fc99fa2a0cd9f4fa7e66b11795f2168132d55318c0173c59a13e6ec86f0631f6eb2c43fbd072a5da7fc75cc162bcb2e0f9ec0642730826a465b5ba4740e8c72f1ad6f7f6f9fc9de59988b28a82df7e5e8c26871d3a53aba6b0624fab128ad269490c6811975cd4ec96c13fac9df248ab76b727b019d06b54a014ebf89395658bc51ecd0ad6b8dbe258dc491c4f3a06ea9dbb6bb5b93fe651906225aaba4f1ba3ab94be5ea427f94b88d77aaa11f2220609dc", 0xcf}], 0x7, &(0x7f0000001b40)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @broadcast}}, @sndinfo={0x20, 0x84, 0x2, {0x8e5e, 0x0, 0x100000001, 0x9ab0, r1}}, @sndinfo={0x20, 0x84, 0x2, {0xfffffffffffffffa, 0x1, 0x101, 0xb132, r2}}], 0x60, 0x4804}, {&(0x7f0000001bc0)=@in={0x2, 0x4e23, @rand_addr=0x7}, 0x10, &(0x7f0000001cc0)=[{&(0x7f0000001c00)="5d677cfb4ea344cc67e3f266e416a15593f793071455b07ab300c7f10817c13300ab7d50ffc9c2b5c1707a20bb8cfc25c8cbe11c98", 0x35}, {&(0x7f0000001c40)="b6f0763525bc83eb4d972491bc39a01247f89b7383813d9c6ee0c0f0dbb1f244619d4510500c15ba7eceacc4e559c9501c01fbf34edd339c46252e80cdcd90a69a170f2de20ac787", 0x48}], 0x2, &(0x7f0000001d80)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x7f}}, @sndrcv={0x30, 0x84, 0x1, {0x8ece, 0x3, 0x8004, 0x2, 0x10001, 0x0, 0x7, 0x20, r3}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @authinfo={0x18, 0x84, 0x6, {0x7ff}}, @authinfo={0x18, 0x84, 0x6, {0x194}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}], 0xb0, 0x40004}], 0x2, 0x4000000)

23:09:35 executing program 1:
socket$key(0xf, 0x3, 0x2)
r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x7a14e794, 0x40)
ftruncate(r0, 0x1)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
socket$packet(0x11, 0x0, 0x300)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0)
perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58)
shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00')
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x9)
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x4000000000000000)
open(0x0, 0x0, 0x0)

23:09:36 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000340)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@mss, @timestamp, @window], 0x3)
sendto$inet(r0, &(0x7f0000000040), 0x100000248, 0x1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14)
shutdown(r0, 0x1)

[  369.953689] binder: 13060:13061 transaction failed 29189/-22, size 24-8 line 2896
23:09:36 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff})
listxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=""/1, 0x1)
getpeername(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000200)=0x426)
open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
fchown(r1, 0x0, 0x0)
dup2(r0, r0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, 0x0)

[  370.013909] binder: undelivered TRANSACTION_ERROR: 29189
[  370.054299] binder: undelivered TRANSACTION_ERROR: 29189
23:09:36 executing program 0:
mkdir(0x0, 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:36 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
connect$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x4}}, 0x10)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x100, 0x4)
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000100)={0x6, 0x2})

23:09:36 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:36 executing program 3:
socketpair$unix(0x1, 0x20800000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@gettaction={0x14, 0x32, 0x501}, 0x14}}, 0x0)

[  370.389592] binder: 13085:13086 transaction failed 29189/-22, size 24-8 line 2896
23:09:36 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x800004e23, @rand_addr=0x3}, 0x10)
sendto$inet(r0, 0x0, 0xfffffffffffffe85, 0x20000003, &(0x7f0000000040)={0x2, 0x1000004e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
r1 = memfd_create(&(0x7f0000000000)='Pev ', 0x0)
ftruncate(r1, 0x200739)
sendfile(r0, r1, 0x0, 0xa00004000000000)

23:09:36 executing program 4:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x1, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e22, 0x10e, @empty, 0x800}, {0xa, 0x4e20, 0x1, @ipv4={[], [], @remote}, 0x12}, 0x3ff, [0x4, 0x3, 0x7f, 0xa78a, 0x3, 0x4, 0x8, 0xcd7b]}, 0x5c)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00042dbd7000fddbdf250b00000014000100080005000300000008000100020000000800040000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8011}, 0x40801)
r2 = timerfd_create(0x0, 0x0)
timerfd_settime(r2, 0x3, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, 0x0)
dup2(r1, r2)

[  370.456110] binder: undelivered TRANSACTION_ERROR: 29189
[  370.558453] tc_dump_action: action bad kind
23:09:36 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:36 executing program 2:
getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000080)=""/167, 0xa7)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clea\x01\x00\x00\x00fs\x00\x84\xfc\x89\xe2\xfa\xbf\xa9o\xe0\xf6\xc7e4\x11\xc7A,@D\x87C\xc2]N\x11\xd2\x99<\xb4\x93\xe8\xb4iT\x11\xcfp\xa9\xea\xbc[\x02\x01<\xf7O\x14\xebkp\x02{\x0f\x81\xb7\x1b\xe8\xd4\xd6\xb5\xf32\xd7O\a')
sendmmsg$inet_sctp(r0, 0x0, 0xffffff10, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000001c0)={<r1=>0x0})
getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000200), &(0x7f00000002c0)=0x4)
ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000240)={r1, &(0x7f0000000200)})

23:09:36 executing program 0:
mkdir(0x0, 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:36 executing program 3:
r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0xa0000)
ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000080)={0x3, 0x0, [{}, {}, {}]})
openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x3, 0x4)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x2a0, 0x0)
fstat(0xffffffffffffffff, 0x0)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
getpid()
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0)
getpgrp(0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto$inet6(r1, 0x0, 0x75, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='bbr\x00', 0x4)
ftruncate(r4, 0x7fff)
sendfile(r2, r4, 0x0, 0x8000fffffffe)

[  370.828910] binder: 13101:13103 transaction failed 29189/-22, size 24-8 line 2896
23:09:37 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f00000000c0)=0x9, 0x4)

[  370.932585] binder: undelivered TRANSACTION_ERROR: 29189
23:09:37 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:37 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=<r1=>0x0)
r2 = getpgid(0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, <r3=>0x0}, &(0x7f0000000100)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000180)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={<r5=>0x0, r0, 0x0, 0xb, &(0x7f00000001c0)='clear_refs\x00'}, 0x30)
lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = getegid()
r8 = syz_open_dev$vcsa(&(0x7f0000000680)='/dev/vcsa#\x00', 0x6, 0x80)
ioctl$KVM_GET_MSR_INDEX_LIST(r8, 0xc004ae02, &(0x7f00000006c0)={0x2, [0x0, 0x0]})
sendmsg$netlink(r0, &(0x7f0000000640)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000340)={0x28c, 0x35, 0x310, 0x70bd29, 0x25dfdbfb, "", [@typed={0x4, 0x8e}, @nested={0x270, 0x6d, [@generic="ef8c449cad6754d530076aaf9e0e2a2ab48e47e143feffa6153c596cd693fd2dc92354a933e44cde6c80468e03bab56b2e5d91ce0fbb661d19b4afce6aac456e24eaebb31180a10da324b0d4736bcb85602c03ffd134e156aa4c2fe1ae0e089548da8d304b1854ae2f30e2ac82196ea40f402f8cb40cfd4eacb3861ba13afa56e494218ad6b8a0c28185ca6486954b5cc081317f0378cc95bf20cd39a5767a44db4994ebce1e37c709805e8bab7bbc33c98ff0718fcfd8d43507bd9deebb2336bdbaeb64657230bece3807452bea22937a2439", @generic="7f51a7ddb37d6b59c00a6ea25be5d68ce7cdf52f76a0d1624cc446a94a268e4d9ae2e68755c0d3294ef304ecdaa0f029556373c02fb51c8e1dfb20425059d80c4cd73c3c2dac401d46021d9dd620b2c4dead88208b067bdcba3cc31440b21d617fb924cf8f19648cc4b796fe7289aaa6d87bb49eda11a1f88b81a6acded43939ecc21e8a73a2fda32c0bef0ed3bcd949c94fe3877b28c7cdaa4adf2a86867133cfd8abb912dc6c2b894f9bd6a6649d7b4d2a8ff13ac9ddff880c297dd1d51dbf6d0a1793543a0e7052a65fc1bd29", @generic="3806c29bdcbb5d916319b1ff881ea56d3efe13fdb3ad18213c563dc8441817e11609b151b3632c8d7686663b2765949f25a028e60210bab9eb4ab6a12634e4630f57e61123c9588277b2f16b972c5fa26408baba775903fc55b7cab16556b60e84081d", @generic="8825e8fcf9fd8428ca344b20e523e8d7c27b698e8457486fc0e9815a6d0a09af40179d969c8244c24e27d9f5500324697a5817a016e2485e29b4ace3a4d1b03433b2413d420d23f066fde66dfc1643d412cc7a0eeb488b3c8d0f1cca893a11b128cee09a36f016ba"]}, @typed={0x8, 0x5, @pid=r1}]}, 0x28c}], 0x1, &(0x7f0000000600)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}], 0x40, 0x80}, 0x80)

[  371.087326] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
23:09:37 executing program 5:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:37 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64)
clone(0x2102201ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_execute_func(&(0x7f00000001c0)="3666440f50f564ff0941c3c40145edbefe008000c4a269a63166420fe2e341d288766d0000d3194183447a0058")
setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000140)={0x77359400}, 0x10)
setsockopt$inet_mreqsrc(r1, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="2265162d6c36d2d553b535288f726cee2343cd3da80438bbe33926e61647fc7fcab63c030ef325ad0f899dcc3d1baefa9b3b5a978b1e8319bcc3c41f139590cb2be0b46092dbd2174e400b05", 0x4c}], 0x1, 0x0)

23:09:37 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000000)={0xb9, 0xfffffffffffff800, 0x81})
sendmmsg$inet_sctp(r0, 0x0, 0xffffffffffffff3a, 0x4c000)

23:09:37 executing program 1:
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:37 executing program 5:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:37 executing program 3:
r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0xa0000)
ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000080)={0x3, 0x0, [{}, {}, {}]})
openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x3, 0x4)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x2a0, 0x0)
fstat(0xffffffffffffffff, 0x0)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
getpid()
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0)
getpgrp(0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto$inet6(r1, 0x0, 0x75, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='bbr\x00', 0x4)
ftruncate(r4, 0x7fff)
sendfile(r2, r4, 0x0, 0x8000fffffffe)

23:09:37 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="2c646f6e745f6d6561737572652c7375626a5f726f6c653d2f4070726f63242e25657468302973656c662daa2c61707072616973652c646f6e745f6d6561737572652c736d61636b66737472616e736d7574653d63657068002c0000cb3f5c763021fc54c5ee2b1dc2a3a294d00ec0fd22f28e83564cc0bb324c0a7536f6e7e212b03272d87d235ac22cd764505f6d6442aa01bcbc0b9f5119df59e8c559047468d076aed22934124653a874ff164345cc1a4561994805fac00f2e26970747694b5010cae29a15759b6f4817cc122f119ce494b65fbf8ee10761222aa7102db470f4f8d7ec45bbea3da23a059b811436caf839b71965dc618f738f8ecb7bf244a79b8210d97ae40f8ac15d22644e26a62c5599a46b6fb06f30"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  371.804139] binder: 13145:13147 got transaction to invalid handle
[  371.866460] binder: 13145:13150 got transaction to invalid handle
23:09:38 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000140)={r0, 0x1, 0x1, "db7d0ed04d0f6fb4ffa49bdde902753b2aa505bc023981e5cb02dc142ba8b60fc0cffbdf23a325c0e31bf27e14528c03adec5458164594f5dc791d4196014549de0fc2f7967d292a6a2a3b098be49fad2fee2cd57afe69787031b5cee5e8fd76ab88aeb8730f25d7c4e349d8830af66972509327a47c15b85a87cd2eff6b23b02b9b0bc88090ea56ca8589f54e5c9d7115a7b3e1820abfba6301e5bb4594c08800b519f103737cc8043cacea878ea2d56bf7451bcf975cdadd9940e0559c1670c342a6b65adfed491dfc25746a7bb3ffa26126f92c5e4c75d6b31c8c3ab3801cb1bdd973c8068b8e88521a31120a7c"})
accept$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000400)={@dev={0xfe, 0x80, [], 0x1e}, 0x3a, r1})
sendmmsg$inet_sctp(r0, 0x0, 0xffffffffffffff16, 0x4010)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={<r2=>0x0, 0x9}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r2, 0x727d}, &(0x7f0000000100)=0x8)

23:09:38 executing program 5:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:38 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl(r0, 0xffffffffffffffb6, &(0x7f00000000c0))

23:09:38 executing program 4:
r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0x100000073)
read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

23:09:38 executing program 2:
getpid()
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc)
ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000180)='net/ip6_tables_matches\x00')
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000)=0xb0, 0x2)
sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x0)

23:09:38 executing program 5:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:38 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x200000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
r1 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffa000/0x1000)=nil)
shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil)
shmget(0x3, 0x1000, 0x100, &(0x7f0000ffe000/0x1000)=nil)
r2 = shmget$private(0x0, 0x3000, 0xa00, &(0x7f0000ff9000/0x3000)=nil)
shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000440)=""/19)
r3 = socket$inet(0x2, 0x3, 0x2)
r4 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x3ff, 0x1)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000000340))
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0)
getsockname(r5, &(0x7f0000000140)=@ipx, &(0x7f0000000500)=0x1b)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000002000)={@loopback, 0x32, r6})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000100)=0x6, 0x8)
setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
r7 = dup2(r3, r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BLKGETSIZE64(r5, 0x80081272, &(0x7f00000004c0))
r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0)
pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r9)
ioctl$KVM_SET_SIGNAL_MASK(r7, 0x4004ae8b, &(0x7f00000006c0)=ANY=[@ANYBLOB="08000000fd23bc1dfd9dea27cd0dff6eeaaf102ca035664cc53435a75cdbd21f6413107d17204e62c2911f5ea8efc5699326e02b66b9523b85c5bbc7334d62a31704008f0a1b111a2aea5892322443260b0c1e54015bb5a5f306c9dc90c0c600010000000000003a89cdbc1a7e34d12656699601a7e0368e2b66f2b7db5ca0f7a0a375adde588cb5b301000034f4e6880693ee3686d0052b07746250b91a7b312d5d5bd662c65b978cfd7d6a1ba7f3841fb4cf5e9e14000000006e56d522e2a2c1801dace11a67ae737614e0732b8745277ca7d36dceea02cc882ae34b6f47e36cf5bb7325babc51d92fca85ca7e04526c0ac1b706a53dcb1b0ff57cbbc28544f788056980a57068bbf96135efe8156fed0f239d8abdb49ab2fbfe84b96747f45d3f1d076ece819afdf8a63d196de6148042363c7536eb582628994bae524763cedf95bed491a48d66c4ffad0cd44138d4406dc03d4db9384cc0c8df6fdc000000000000000000000000e8c052505df9dccd3338edc78855d27b6a6c3bf856c6bd860578b5aebcaee613176d4f27ea02d0bed65b40e3f861d951b8cc3144e0e11c56491900053d4d8ae59d510be743f03a4fb6bee4b95635d53fcaa0417d11cdec54f5f56904bd146e81057bf6e8000000806ad37e48732459dcebd4bd85a756721bcd6c49fbeeb6377f51af9dd1bfc0f3151ca117ef94f2a17f36609633c7989f5932a4d655a0ea692abae6524ad29d137dd1e37102470000000000000000000000640a48e1416ba15aa5428d20daae1533354a868df0eecb622ae8fac93f239064b77a3a19a1a8b637588561e71e5461057dd18bad21186b3fa8d0540aa612355328b8d10d71cfc77cc0d12cca03292a95bad0a14d66f83f2d562fe805a4"])
accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800)
ioctl$SCSI_IOCTL_DOORLOCK(r7, 0x5380)

23:09:38 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:38 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:38 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={<r0=>0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xb, &(0x7f00000000c0)='clear_refs\x00'}, 0x30)
r1 = syz_open_procfs(r0, &(0x7f0000000000)='uid_map\x00')
sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x0)

23:09:38 executing program 5:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:39 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:39 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xff, 0x4, 0xd8a, 0x8, 0x1b, 0x2, 0xb618, 0xfffffffffffffffe, 0x7, 0x7ff})
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x141000, 0x0)

23:09:39 executing program 5:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:39 executing program 1:
clone(0x800000007fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
fchdir(r0)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = memfd_create(&(0x7f0000000140)='\r\xd6J\xf4sn}1\xd4@v\xf4\xads\x05\xca\xb1\xa0\x97\xc3o9+W\x850\xba\xae\x1a\xc9M\xafs\x14\xbb#\xab\xf8\xd9%\x14!\xf8\xb2\x89\x7fS$4\f\xe0_{bJ\xbfD\x8a\x00xp', 0x0)
write(r2, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)

23:09:39 executing program 4:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x5}], 0x200000000000000f)
r1 = gettid()
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1104400000013)

23:09:39 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="2c646f6e745f6d6561737572652c7375626a5f726f6c653d2f4070726f63242e25657468302973656c662daa2c61707072616973652c646f6e745f6d6561737572652c736d61636b66737472616e736d7574653d63657068002c0000cb3f5c763021fc54c5ee2b1dc2a3a294d00ec0fd22f28e83564cc0bb324c0a7536f6e7e212b03272d87d235ac22cd764505f6d6442aa01bcbc0b9f5119df59e8c559047468d076aed22934124653a874ff164345cc1a4561994805fac00f2e26970747694b5010cae29a15759b6f4817cc122f119ce494b65fbf8ee10761222aa7102db470f4f8d7ec45bbea3da23a059b811436caf839b71965dc618f738f8ecb7bf244a79b8210d97ae40f8ac15d22644e26a62c5599a46b6fb06f30"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:39 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:39 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:09:39 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:39 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r1=>0x0})
getpriority(0x0, r1)
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)

[  373.667175] binder_alloc: 13227: binder_alloc_buf, no vma
[  373.672987] binder_transaction: 2 callbacks suppressed
[  373.673024] binder: 13227:13228 transaction failed 29189/-3, size 24-8 line 3035
23:09:39 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x0, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  373.812516] binder: 13227:13238 got transaction to invalid handle
[  373.818923] binder: 13227:13238 transaction failed 29201/-22, size 0-0 line 2896
[  373.872484] binder_release_work: 2 callbacks suppressed
[  373.872502] binder: undelivered TRANSACTION_ERROR: 29189
[  373.914699] binder: undelivered TRANSACTION_ERROR: 29201
23:09:40 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:40 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:40 executing program 2:
r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0)
signalfd4(r0, &(0x7f0000000040)={0x7}, 0x8, 0x800)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r1, 0x0, 0x365, 0x0)

[  374.076981] binder_alloc: 13251: binder_alloc_buf, no vma
[  374.084758] binder: 13251:13252 transaction failed 29189/-3, size 24-8 line 3035
23:09:40 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4012, r1, 0x0)

[  374.120052] binder: 13251:13252 got transaction to invalid handle
[  374.126565] binder: 13251:13252 transaction failed 29201/-22, size 0-0 line 2896
23:09:40 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x0, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:40 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x19)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070")
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000001c0)={@multicast2, @local, 0x0, 0x1, [@remote]}, 0x14)

[  374.246122] binder: undelivered TRANSACTION_ERROR: 29189
[  374.252735] binder: undelivered TRANSACTION_ERROR: 29201
23:09:40 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:40 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:40 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
shmctl$SHM_STAT(0x0, 0xd, 0x0)

23:09:40 executing program 2:
r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0xd5ab1d9bcda48a5e)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)={0x2, [0x0, <r1=>0x0]}, &(0x7f0000000140)=0xc)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x1e}}}}, 0x84)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000000)={<r3=>0x0, 0x40, "cb03b2466c2090c2dda40331ba3d22251d0cb1742e2bbcf5ca5f8a0f7c6a22510f85461e7320c84fb9f7a67cb91e321945900c28a978ae31a88d459ce676090b"}, &(0x7f0000000080)=0x48)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000000c0)={r3, 0x1ff, 0x1}, 0x8)

[  374.637334] binder_alloc: 13278: binder_alloc_buf, no vma
[  374.643280] binder: 13278:13280 transaction failed 29189/-3, size 24-8 line 3035
23:09:40 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x11)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000))

[  374.699566] binder: 13278:13280 got transaction to invalid handle
[  374.706175] binder: 13278:13280 transaction failed 29201/-22, size 0-0 line 2896
23:09:40 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x0, 0x100)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="2c646f6e745f6d6561737572652c7375626a5f726f6c653d2f4070726f63242e25657468302973656c662daa2c61707072616973652c646f6e745f6d6561737572652c736d61636b66737472616e736d7574653d63657068002c0000cb3f5c763021fc54c5ee2b1dc2a3a294d00ec0fd22f28e83564cc0bb324c0a7536f6e7e212b03272d87d235ac22cd764505f6d6442aa01bcbc0b9f5119df59e8c559047468d076aed22934124653a874ff164345cc1a4561994805fac00f2e26970747694b5010cae29a15759b6f4817cc122f119ce494b65fbf8ee10761222aa7102db470f4f8d7ec45bbea3da23a059b811436caf839b71965dc618f738f8ecb7bf244a79b8210d97ae40f8ac15d22644e26a62c5599a46b6fb06f30"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:40 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:40 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
socket$inet6_dccp(0xa, 0x6, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffffbc, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$FUSE_DIRENT(r4, &(0x7f0000000180)={0xc8, 0x0, 0x5, [{0x6, 0x1, 0x1f, 0x5, 'wlan1GPLwlan0{vboxnet1mime_type'}, {0x3, 0x80000000, 0x7, 0x8b, 'selinux'}, {0x5, 0x8001, 0xf, 0x401, '/dev/vfio/vfio\x00'}, {0x2, 0xff, 0x0, 0x9}, {0x0, 0x59, 0x1, 0x77, '.'}]}, 0xc8)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10)
dup2(r0, r1)

[  374.854510] binder: undelivered TRANSACTION_ERROR: 29189
[  374.862590] binder: undelivered TRANSACTION_ERROR: 29201
23:09:41 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={<r1=>0x0, 0x9, 0x6, 0x200000000000000}, &(0x7f0000000080)=0x10)
alarm(0x7)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r1, 0x8000, 0x1, 0x5}, &(0x7f0000000100)=0x10)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x400, 0x0)
sendmmsg$inet_sctp(r0, 0x0, 0x1850dc57173a54d1, 0x8003)

23:09:41 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:41 executing program 1:

[  375.122794] protocol 88fb is buggy, dev hsr_slave_0
[  375.128584] protocol 88fb is buggy, dev hsr_slave_1
[  375.255487] binder_alloc: 13307: binder_alloc_buf, no vma
[  375.261290] binder: 13307:13311 transaction failed 29189/-3, size 24-8 line 3035
23:09:41 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:41 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="2c646f6e745f6d6561737572652c7375626a5f726f6c653d2f4070726f63242e25657468302973656c662daa2c61707072616973652c646f6e745f6d6561737572652c736d61636b66737472616e736d7574653d63657068002c0000cb3f5c763021fc54c5ee2b1dc2a3a294d00ec0fd22f28e83564cc0bb324c0a7536f6e7e212b03272d87d235ac22cd764505f6d6442aa01bcbc0b9f5119df59e8c559047468d076aed22934124653a874ff164345cc1a4561994805fac00f2e26970747694b5010cae29a15759b6f4817cc122f119ce494b65fbf8ee10761222aa7102db470f4f8d7ec45bbea3da23a059b811436caf839b71965dc618f738f8ecb7bf244a79b8210d97ae40f8ac15d22644e26a62c5599a46b6fb06f30"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  375.330693] binder: 13307:13315 got transaction to invalid handle
[  375.337264] binder: 13307:13315 transaction failed 29201/-22, size 0-0 line 2896
[  375.419064] binder: undelivered TRANSACTION_ERROR: 29189
[  375.429148] binder: undelivered TRANSACTION_ERROR: 29201
23:09:41 executing program 1:

23:09:41 executing program 2:
fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040))
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)=<r0=>0x0)
r1 = getpgid(r0)
r2 = syz_open_procfs(r1, &(0x7f0000000000)='clear_refs\x00')
sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0)

[  375.522749] protocol 88fb is buggy, dev hsr_slave_0
[  375.528411] protocol 88fb is buggy, dev hsr_slave_1
23:09:41 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:41 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:41 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:41 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
socket$inet6_dccp(0xa, 0x6, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffffbc, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$FUSE_DIRENT(r4, &(0x7f0000000180)={0xc8, 0x0, 0x5, [{0x6, 0x1, 0x1f, 0x5, 'wlan1GPLwlan0{vboxnet1mime_type'}, {0x3, 0x80000000, 0x7, 0x8b, 'selinux'}, {0x5, 0x8001, 0xf, 0x401, '/dev/vfio/vfio\x00'}, {0x2, 0xff, 0x0, 0x9}, {0x0, 0x59, 0x1, 0x77, '.'}]}, 0xc8)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10)
dup2(r0, r1)

23:09:41 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

[  375.834010] binder: 13331:13333 transaction failed 29189/-22, size 24-8 line 2896
[  375.949951] binder: undelivered TRANSACTION_ERROR: 29189
23:09:42 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64)
clone(0x2102201ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000140)={0x77359400}, 0x10)
setsockopt$inet_mreqsrc(r1, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="2265162d6c36d2d553b535288f726cee2343cd3da80438bbe33926e61647fc7fcab63c030ef325ad0f899dcc3d1baefa9b3b5a978b1e8319bcc3c41f139590cb2be0b46092dbd2174e400b05", 0x4c}], 0x1, 0x0)

23:09:42 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:42 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000040))
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
write$vhci(r0, &(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, "6a334a0ace335d6a62237aa3c19909843ab9e49181e6"}, 0x17)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x4)

23:09:42 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:42 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000400009500000000000000"], 0x0, 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1})
shutdown(r0, 0x1)

23:09:42 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:42 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  376.473430] binder_alloc: 13361: binder_alloc_buf, no vma
[  376.479090] binder: 13361:13363 transaction failed 29189/-3, size 24-8 line 3035
23:09:42 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/84, 0x54}, {&(0x7f0000000100)=""/12, 0xc}, {&(0x7f0000000140)=""/239, 0xef}, {&(0x7f0000000240)=""/5, 0x5}, {&(0x7f0000000340)=""/175, 0xaf}], 0x5, &(0x7f0000000400)=""/223, 0xdf}, 0x60)
ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000540)={0x9, "e49f033f02c41d04330b8c0166782b3a5bcc0c48d19a787c75ad4de8a40c7d63", 0x3, 0x1})
socket$inet_udp(0x2, 0x2, 0x0)

[  376.615515] binder: 13361:13372 got transaction to invalid handle
23:09:42 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="2c646f6e745f6d6561737572652c7375626a5f726f6c653d2f4070726f63242e25657468302973656c662daa2c61707072616973652c646f6e745f6d6561737572652c736d61636b66737472616e736d7574653d63657068002c0000cb3f5c763021fc54c5ee2b1dc2a3a294d00ec0fd22f28e83564cc0bb324c0a7536f6e7e212b03272d87d235ac22cd764505f6d6442aa01bcbc0b9f5119df59e8c559047468d076aed22934124653a874ff164345cc1a4561994805fac00f2e26970747694b5010cae29a15759b6f4817cc122f119ce494b65fbf8ee10761222aa7102db470f4f8d7ec45bbea3da23a059b811436caf839b71965dc618f738f8ecb7bf244a79b8210d97ae40f8ac15d22644e26a62c5599a46b6fb06f30"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  376.656546] binder: undelivered TRANSACTION_ERROR: 29189
23:09:42 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x40000000000002f, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

23:09:42 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:43 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r1, r0, 0x0)

23:09:43 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f0000000000), 0x0, 0x4000)

[  376.948489] binder: 13389:13392 got transaction to invalid handle
23:09:43 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:43 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="2c646f6e745f6d6561737572652c7375626a5f726f6c653d2f4070726f63242e25657468302973656c662daa2c61707072616973652c646f6e745f6d6561737572652c736d61636b66737472616e736d7574653d63657068002c0000cb3f5c763021fc54c5ee2b1dc2a3a294d00ec0fd22f28e83564cc0bb324c0a7536f6e7e212b03272d87d235ac22cd764505f6d6442aa01bcbc0b9f5119df59e8c559047468d076aed22934124653a874ff164345cc1a4561994805fac00f2e26970747694b5010cae29a15759b6f4817cc122f119ce494b65fbf8ee10761222aa7102db470f4f8d7ec45bbea3da23a059b811436caf839b71965dc618f738f8ecb7bf244a79b8210d97ae40f8ac15d22644e26a62c5599a46b6fb06f30"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:43 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  377.340760] binder: 13411:13412 got transaction to invalid handle
23:09:43 executing program 4:

23:09:43 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x0)
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)

23:09:43 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:43 executing program 1:

23:09:43 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:43 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:43 executing program 1:

23:09:43 executing program 4:

23:09:43 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

[  377.781157] binder: 13431:13433 got transaction to invalid handle
23:09:43 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, 0x0, &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="2c646f6e745f6d6561737572652c7375626a5f726f6c653d2f4070726f63242e25657468302973656c662daa2c61707072616973652c646f6e745f6d6561737572652c736d61636b66737472616e736d7574653d63657068002c0000cb3f5c763021fc54c5ee2b1dc2a3a294d00ec0fd22f28e83564cc0bb324c0a7536f6e7e212b03272d87d235ac22cd764505f6d6442aa01bcbc0b9f5119df59e8c559047468d076aed22934124653a874ff164345cc1a4561994805fac00f2e26970747694b5010cae29a15759b6f4817cc122f119ce494b65fbf8ee10761222aa7102db470f4f8d7ec45bbea3da23a059b811436caf839b71965dc618f738f8ecb7bf244a79b8210d97ae40f8ac15d22644e26a62c5599a46b6fb06f30"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:43 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, {0x0, 0x0, 0x1, 0x6506, 0xffff, 0x80000000000000}, 0x80000000}, 0xa)
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)

23:09:44 executing program 5:
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:44 executing program 4:

23:09:44 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:44 executing program 1:

[  378.248778] binder: 13450:13451 got transaction to invalid handle
23:09:44 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0xffffffb1, 0x0)

23:09:44 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, 0x0, &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:44 executing program 5:
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:44 executing program 4:

23:09:44 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, 0x0, &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:44 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc)
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x5, 0x0, &(0x7f0000ffc000/0x2000)=nil})

23:09:44 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:44 executing program 1:

[  378.629308] binder: 13467:13468 got transaction to invalid handle
23:09:44 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:44 executing program 4:

23:09:44 executing program 5:
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  378.884949] binder_release_work: 8 callbacks suppressed
[  378.884968] binder: undelivered TRANSACTION_ERROR: 29201
23:09:45 executing program 4:

23:09:45 executing program 1:

23:09:45 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:45 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
setsockopt$inet_tcp_buf(r0, 0x6, 0x2f, &(0x7f0000000000)="b91974141bb867d60d9e14b12e88c301e7698c58179571001bb52437e01e1f924373f5d02a8090ef00e65d30e51cf3d74eef88e40597202f917543b5ed9b86d564c6ea33489a97351d42f7c5c4fce68987d625cc8195f55d4665678b5b3a104f8568db", 0x63)
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)

23:09:45 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  379.164009] binder: 13492:13495 got transaction to invalid handle
[  379.170411] binder_transaction: 9 callbacks suppressed
[  379.170449] binder: 13492:13495 transaction failed 29201/-22, size 0-0 line 2896
23:09:45 executing program 1:

23:09:45 executing program 4:

[  379.274372] cgroup: fork rejected by pids controller in /syz0
23:09:45 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:45 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

[  379.460206] binder: undelivered TRANSACTION_ERROR: 29201
23:09:45 executing program 4:

23:09:45 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='clear_refs\x00')
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000000)=""/254)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x101, @rand_addr="885b880be642fcb687af810b5fca63de", 0x8}, 0x1c)
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000100)=0x8000)

23:09:45 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC, @ANYBLOB="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"])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:45 executing program 1:

[  379.641282] binder: 13513:13518 ioctl c0306201 0 returned -14
23:09:45 executing program 4:

[  379.744627] binder: 13513:13525 got transaction to invalid handle
[  379.751024] binder: 13513:13525 transaction failed 29201/-22, size 0-0 line 2896
23:09:46 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, 0x0)
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:46 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:46 executing program 2:

23:09:46 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  379.989102] binder: undelivered TRANSACTION_ERROR: 29201
23:09:46 executing program 4:

23:09:46 executing program 1:

[  380.154125] binder: 13538:13540 ioctl c0306201 0 returned -14
[  380.240928] binder: 13538:13548 got transaction to invalid handle
[  380.247468] binder: 13538:13548 transaction failed 29201/-22, size 0-0 line 2896
23:09:46 executing program 2:

23:09:46 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:46 executing program 4:

23:09:46 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, 0x0)
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:46 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  380.376392] binder: undelivered TRANSACTION_ERROR: 29201
23:09:46 executing program 1:

23:09:46 executing program 2:

[  380.625667] binder: 13561:13564 ioctl c0306201 0 returned -14
23:09:46 executing program 4:

[  380.673903] binder: 13561:13564 got transaction to invalid handle
[  380.680331] binder: 13561:13564 transaction failed 29201/-22, size 0-0 line 2896
23:09:46 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, 0x0)
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:46 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:46 executing program 2:

23:09:46 executing program 1:

23:09:47 executing program 4:

23:09:47 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:47 executing program 2:

[  381.027587] binder: undelivered TRANSACTION_ERROR: 29201
23:09:47 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:47 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:47 executing program 4:

[  381.241328] binder: 13585:13587 got transaction to invalid handle
[  381.247848] binder: 13585:13587 transaction failed 29201/-22, size 0-0 line 2896
23:09:47 executing program 2:

23:09:47 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<'])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:47 executing program 1:

23:09:47 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:47 executing program 4:

[  381.536702] binder: undelivered TRANSACTION_ERROR: 29201
23:09:47 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:47 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<'])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:47 executing program 2:

[  381.694400] binder: 13606:13607 got transaction to invalid handle
[  381.700960] binder: 13606:13607 transaction failed 29201/-22, size 0-0 line 2896
23:09:47 executing program 1:

23:09:48 executing program 4:

23:09:48 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:48 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:48 executing program 1:

[  381.985170] binder: undelivered TRANSACTION_ERROR: 29201
23:09:48 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner<'])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:48 executing program 2:

23:09:48 executing program 4:

[  382.212251] binder: 13624:13628 got transaction to invalid handle
[  382.218594] binder: 13624:13628 transaction failed 29201/-22, size 0-0 line 2896
23:09:48 executing program 3:
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:48 executing program 1:

23:09:48 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:48 executing program 4:

23:09:48 executing program 2:

23:09:48 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  382.576964] binder: undelivered TRANSACTION_ERROR: 29201
23:09:48 executing program 3:
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

[  382.786495] binder: 13652:13654 got transaction to invalid handle
[  382.793125] binder: 13652:13654 transaction failed 29201/-22, size 0-0 line 2896
23:09:48 executing program 4:

23:09:48 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0)
preadv(r0, 0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r1, r0, 0x0)

23:09:48 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
r1 = dup(r0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0)

23:09:49 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:49 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  382.958629] binder: undelivered TRANSACTION_ERROR: 29201
23:09:49 executing program 3:
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:49 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
perf_event_open(&(0x7f0000001180)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x4c)

23:09:49 executing program 2:
openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00\xe7y\x9dH\x96\x1a\"\xaa\xbb\xb2\x8f_\xe1R\x90\xcb`\xfa\xe0]8s\xf0H\xe5\xe9\xc3\x98\x1f\xc2\x93Q\x89k\xc57\xe1\xd3M\xd4,=q\xb2\x92f\xc2)\x94\b\x00\x00\x00\x00\x00\x00\x00g%\x9e\x8fm!X\b\x8b\xf7_\x01\xe0\xabd_o\xa7m\x16\x8c\x00\xad{;\xfc=s\xcbq5\x97\x01e\x83\xae-\b:g8l\rv\x05\xa0m\xfc\xe0k`\xd3X\xba\xd2\xd3M\xaa@0\x1a {v)\x00\xf2k\x86PI!\xa7\xfb\xe5\r\xdcF\x11m\x8f\x02\x1b\x1a?\\\xbdBU\xe8\xab\xac\xe3GvY\xc7W\'\xcb\xd1\xd6\xad\xf2\x0e\xd8}*\xcb:\t\x17&G0\x9d\xad\x8f\x836F\xc3<\x1d\xd6\x0f\xac\x95\xb2\xbeZ\xc5\xdd\xb0\t\xdd)J\xe9\xa1\xfc\xde\xfd\t/e\x8b\xa0\r2\x043\x8a$+\x84\x10\xfc\xde2\xd55\xa4\x17\xd9\x82\aM4}~g\xc7/=y\xcb\xf5\x81\xdaT\xe9\x05\xd3v\xfb1\xf4\x1b}\xa7\xe23!\f\xd13\xaaI\xc2\xe0O\xae:\xe4', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x40000, 0xfff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/254)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x0)
fallocate(r0, 0x0, 0x0, 0x10fffa)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x0, 0x8})
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)

23:09:49 executing program 1:

23:09:49 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:49 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:49 executing program 3:
r0 = socket$inet(0x2, 0x0, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:49 executing program 4:

[  383.549104] binder: 13689:13691 got transaction to invalid handle
[  383.555870] binder: 13689:13691 transaction failed 29201/-22, size 0-0 line 2896
23:09:49 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$inet6_dccp(0xa, 0x6, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000180)={0x48, 0x0, 0x0, [{0x0, 0x0, 0x1f, 0x5, 'wlan1GPLwlan0{vboxnet1mime_type'}]}, 0x48)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

23:09:49 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB, @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  383.763446] protocol 88fb is buggy, dev hsr_slave_0
[  383.769061] protocol 88fb is buggy, dev hsr_slave_1
23:09:49 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  383.831917] binder: undelivered TRANSACTION_ERROR: 29201
[  383.852717] protocol 88fb is buggy, dev hsr_slave_0
[  383.858580] protocol 88fb is buggy, dev hsr_slave_1
23:09:50 executing program 4:
getpid()
geteuid()
getgid()
getpgid(0x0)
stat(0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)

23:09:50 executing program 3:
r0 = socket$inet(0x2, 0x0, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

[  383.975433] binder: 13715:13716 got transaction with invalid offset (0, min 0 max 0) or object.
[  383.984765] binder: 13715:13716 transaction failed 29201/-22, size 0-8 line 3097
23:09:50 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB, @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  384.092007] binder: 13715:13724 got transaction to invalid handle
[  384.100257] binder: undelivered TRANSACTION_ERROR: 29201
[  384.105216] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma?
[  384.220215] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma?
23:09:50 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB, @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:50 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:50 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140006000000000000000040000000000200000014000200fe8000000000000000000000000000aa"], 0x1}}, 0x0)

23:09:50 executing program 3:
r0 = socket$inet(0x2, 0x0, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:50 executing program 2:
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0x102}, 0x20)

23:09:50 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c12a41d88b070")
r1 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
write$binfmt_aout(r1, 0x0, 0x0)

[  384.465751] binder: undelivered TRANSACTION_ERROR: 29201
[  384.727369] binder: 13754:13760 got transaction with invalid offset (0, min 0 max 0) or object.
[  384.736633] binder_transaction: 1 callbacks suppressed
[  384.736671] binder: 13754:13760 transaction failed 29201/-22, size 0-8 line 3097
23:09:50 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x981900})

[  384.788207] binder: 13754:13804 got transaction to invalid handle
[  384.794894] binder: 13754:13804 transaction failed 29201/-22, size 0-0 line 2896
23:09:50 executing program 1:
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x200, 0x0)
ioctl$BLKPG(r0, 0x40140921, &(0x7f0000000000)={0x0, 0x1f, 0x0, 0x0})

23:09:50 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x8020000)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00')
setns(r1, 0x0)

23:09:51 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

[  384.926426] binder: undelivered TRANSACTION_ERROR: 29201
23:09:51 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  385.077749] binder: undelivered TRANSACTION_ERROR: 29201
23:09:51 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x200000000000000f)
r1 = gettid()
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1104400000013)

23:09:51 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_oth', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  385.179857] binder: 13873:13874 got transaction with invalid offset (0, min 0 max 0) or object.
[  385.191807] binder: 13873:13874 transaction failed 29201/-22, size 0-8 line 3097
23:09:51 executing program 4:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x2a02, 0x0)
write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x405, 0xfffffffffffffff0}, {}, @quote}], 0x28c)

23:09:51 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

[  385.307283] binder: 13873:13882 got transaction to invalid handle
[  385.313812] binder: 13873:13882 transaction failed 29201/-22, size 0-0 line 2896
23:09:51 executing program 2:
clone(0x800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x20800000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@gettaction={0x18, 0x32, 0x501, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0)
socketpair(0x0, 0x3, 0x4, 0x0)
socket$netlink(0x10, 0x3, 0x12)

[  385.396521] binder: undelivered TRANSACTION_ERROR: 29201
[  385.504926] tc_dump_action: action bad kind
23:09:51 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000080)={0x28, 0x4, 0x0, {0x1}}, 0x28)

23:09:51 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_oth', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:51 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:51 executing program 1:

[  385.558126] binder: undelivered TRANSACTION_ERROR: 29201
23:09:51 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

[  385.758270] binder: 13903:13907 got transaction with invalid offset (0, min 0 max 0) or object.
[  385.767585] binder: 13903:13907 transaction failed 29201/-22, size 0-8 line 3097
23:09:51 executing program 4:

23:09:51 executing program 1:

[  385.889016] binder: 13903:13916 got transaction to invalid handle
[  385.895696] binder: 13903:13916 transaction failed 29201/-22, size 0-0 line 2896
23:09:52 executing program 4:

23:09:52 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_oth', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:52 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

[  385.988998] binder: undelivered TRANSACTION_ERROR: 29201
23:09:52 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000004c0)={0x20, r1, 0x701, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0)
recvmmsg(r0, &(0x7f0000000000), 0x188, 0x0, 0x0)

23:09:52 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:52 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:09:52 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x5, 0x84, 0xff, 0x1}, 0x14)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), 0x0, 0x2}, 0x20)

[  386.228007] binder: undelivered TRANSACTION_ERROR: 29201
23:09:52 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fo', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:52 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:52 executing program 4:

[  386.468846] binder: 13936:13939 got transaction with invalid offset (0, min 0 max 0) or object.
[  386.478121] binder: 13936:13939 transaction failed 29201/-22, size 0-8 line 3097
[  386.570208] binder: 13936:13939 got transaction to invalid handle
[  386.576847] binder: 13936:13939 transaction failed 29201/-22, size 0-0 line 2896
23:09:52 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fo', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  386.646898] binder: undelivered TRANSACTION_ERROR: 29201
23:09:52 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:52 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:09:52 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:52 executing program 4:

[  386.791890] binder: undelivered TRANSACTION_ERROR: 29201
[  386.925670] binder: 13957:13963 got transaction with invalid offset (0, min 0 max 0) or object.
[  386.934847] binder: 13957:13963 transaction failed 29201/-22, size 0-8 line 3097
[  387.014684] binder: 13957:13967 got transaction to invalid handle
[  387.021023] binder: 13957:13967 transaction failed 29201/-22, size 0-0 line 2896
23:09:53 executing program 2:

23:09:53 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:53 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fo', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:53 executing program 4:

23:09:53 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:09:53 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:53 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowne', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:53 executing program 2:

23:09:53 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

[  387.455627] binder: 13986:13987 got transaction with invalid offset (0, min 0 max 24) or object.
[  387.556320] binder: 13986:13995 got transaction to invalid handle
23:09:53 executing program 4:

23:09:53 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:09:53 executing program 2:

23:09:53 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowne', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:53 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:54 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:54 executing program 2:

23:09:54 executing program 4:

23:09:54 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowne', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:54 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:54 executing program 2:

[  388.195100] binder: 14018:14023 got transaction with invalid offset (0, min 0 max 24) or object.
23:09:54 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)

23:09:54 executing program 4:

[  388.311630] binder: 14018:14023 got transaction to invalid handle
23:09:54 executing program 2:

23:09:54 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:54 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:54 executing program 4:

23:09:54 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:54 executing program 2:

23:09:54 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:54 executing program 4:

[  388.859546] binder: 14050:14053 got transaction with invalid offset (0, min 0 max 24) or object.
23:09:54 executing program 2:

23:09:55 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  388.946094] binder: 14050:14058 got transaction to invalid handle
[  389.178514] binder_release_work: 7 callbacks suppressed
[  389.178533] binder: undelivered TRANSACTION_ERROR: 29201
23:09:55 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)

23:09:55 executing program 2:

23:09:55 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:55 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:55 executing program 4:

23:09:55 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,fowner', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  389.413523] binder: 14073:14074 got transaction to invalid handle
23:09:55 executing program 2:

[  389.465540] binder: release 14073:14074 transaction 122 out, still active
[  389.472691] binder: undelivered TRANSACTION_COMPLETE
23:09:55 executing program 4:

23:09:55 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:55 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

[  389.595349] binder: undelivered TRANSACTION_ERROR: 29201
[  389.600994] binder: send failed reply for transaction 122, target dead
23:09:55 executing program 2:

23:09:55 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  389.795588] binder: 14093:14094 got transaction to invalid handle
[  389.802089] binder_transaction: 7 callbacks suppressed
[  389.802128] binder: 14093:14094 transaction failed 29201/-22, size 0-0 line 2896
[  389.923559] binder: release 14093:14094 transaction 125 out, still active
[  389.930623] binder: undelivered TRANSACTION_COMPLETE
[  390.096894] binder: undelivered TRANSACTION_ERROR: 29201
[  390.102596] binder: send failed reply for transaction 125, target dead
23:09:56 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)

23:09:56 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:56 executing program 4:

23:09:56 executing program 2:

23:09:56 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:56 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  390.417738] binder: 14108:14109 got transaction to invalid handle
[  390.424421] binder: 14108:14109 transaction failed 29201/-22, size 0-0 line 2896
23:09:56 executing program 2:

23:09:56 executing program 4:

23:09:56 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

[  390.520522] binder: release 14108:14109 transaction 128 out, still active
[  390.527660] binder: undelivered TRANSACTION_COMPLETE
23:09:56 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:56 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:09:56 executing program 4:

[  390.761380] binder: undelivered TRANSACTION_ERROR: 29201
[  390.767104] binder: send failed reply for transaction 128, target dead
[  390.974039] binder: 14135:14137 got transaction to invalid handle
[  390.980375] binder: 14135:14137 transaction failed 29201/-22, size 0-0 line 2896
[  391.032384] binder: release 14135:14137 transaction 131 out, still active
[  391.039466] binder: undelivered TRANSACTION_COMPLETE
[  391.099894] binder: undelivered TRANSACTION_ERROR: 29201
[  391.105909] binder: send failed reply for transaction 131, target dead
23:09:57 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
tkill(r0, 0x16)

23:09:57 executing program 2:

23:09:57 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:57 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYBLOB, @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:57 executing program 4:

23:09:57 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  391.363510] binder: 14145:14147 got transaction to invalid handle
[  391.369979] binder: 14145:14147 transaction failed 29201/-22, size 0-0 line 2896
23:09:57 executing program 2:

[  391.430969] binder: release 14145:14147 transaction 134 out, still active
[  391.438149] binder: undelivered TRANSACTION_COMPLETE
23:09:57 executing program 4:

23:09:57 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:09:57 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYBLOB, @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:09:57 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  391.551383] binder: undelivered TRANSACTION_ERROR: 29201
[  391.557227] binder: send failed reply for transaction 134, target dead
23:09:57 executing program 2:

[  391.763975] binder: 14163:14166 got transaction to invalid handle
[  391.770383] binder: 14163:14166 transaction failed 29201/-22, size 0-0 line 2896
[  391.832568] binder: release 14163:14166 transaction 137 out, still active
[  391.839681] binder: undelivered TRANSACTION_COMPLETE
[  391.959506] binder: undelivered TRANSACTION_ERROR: 29201
[  391.965322] binder: send failed reply for transaction 137, target dead
23:10:00 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
tkill(r0, 0x16)

23:10:00 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:00 executing program 4:

23:10:00 executing program 2:

23:10:00 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYBLOB, @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:00 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  394.439857] binder: release 14178:14179 transaction 140 out, still active
[  394.447026] binder: unexpected work type, 4, not freed
[  394.452564] binder: undelivered TRANSACTION_COMPLETE
23:10:00 executing program 2:

23:10:00 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:00 executing program 4:

[  394.601845] binder: send failed reply for transaction 140, target dead
23:10:00 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:10:00 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:00 executing program 2:
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
ptrace$getenv(0x4201, 0x0, 0x4, &(0x7f00000003c0))
fsync(0xffffffffffffffff)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x1ff, 0x4)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0), 0x2ba)
recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)
shutdown(r0, 0x1)

[  394.978657] binder: release 14300:14305 transaction 144 out, still active
[  394.985919] binder: unexpected work type, 4, not freed
[  394.991240] binder: undelivered TRANSACTION_COMPLETE
[  395.072884] binder: send failed reply for transaction 144, target dead
23:10:03 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
tkill(r0, 0x16)

23:10:03 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYBLOB=',allow_oth', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:03 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x26e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000340)={0xff})
fstat(r0, &(0x7f0000000480))

23:10:03 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:10:03 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:03 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x38}], 0xf, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r1, r0, 0x0)

[  397.633781] binder: release 14318:14327 transaction 148 out, still active
[  397.640955] binder: unexpected work type, 4, not freed
[  397.646560] binder: undelivered TRANSACTION_COMPLETE
23:10:03 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:03 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

23:10:03 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYBLOB=',allow_oth', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:03 executing program 2:
r0 = socket(0x1e, 0x4, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000600)='TIPC\x00')
sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
fremovexattr(r0, 0x0)
gettid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x800, @local, 0x8}, 0x1c)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x121102, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-monitor\x00', 0x400, 0x0)
r3 = syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000480)={r2, 0xffffffffffffffff, 0x7, r3})
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10)
getsockname$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x7, 0x202, 0x30, 0x3, <r5=>0x0}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000280)={r5, 0x7fffffff}, &(0x7f0000000340)=0x8)
ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300))
readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80000, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000000500)=0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  397.758349] binder: send failed reply for transaction 148, target dead
23:10:03 executing program 4:

[  397.940608] binder: 14337:14340 ioctl c0306201 0 returned -14
[  397.974281] binder: release 14337:14340 transaction 152 out, still active
[  397.981399] binder: unexpected work type, 4, not freed
23:10:04 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

[  397.986855] binder: undelivered TRANSACTION_COMPLETE
[  398.215820] binder: send failed reply for transaction 152, target dead
23:10:06 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, 0x0}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:06 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
dup2(r1, r2)
tkill(r0, 0x16)

23:10:06 executing program 4:

23:10:06 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYBLOB=',allow_oth', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:06 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

23:10:06 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000900)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}}}, 0xb8}}, 0x0)

[  400.706176] binder: 14361:14363 ioctl c0306201 0 returned -14
[  400.732768] binder: release 14361:14363 transaction 156 out, still active
[  400.739939] binder: unexpected work type, 4, not freed
[  400.745557] binder: undelivered TRANSACTION_COMPLETE
23:10:06 executing program 4:
socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x7, 0x9}, &(0x7f0000000100)=0xc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
unshare(0x40000000)
fchmodat(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000040)={0x3})

23:10:06 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYBLOB=',allow_other,fo', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:06 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, 0x0}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:07 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

[  400.917182] binder: send failed reply for transaction 156, target dead
[  400.935533] IPVS: ftp: loaded support on port[0] = 21
23:10:07 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
r1 = gettid()
process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x32f, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x16d, 0x0)
close(r0)

23:10:07 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
dup2(r1, r2)
tkill(r0, 0x16)

[  401.138002] binder: 14384:14387 ioctl c0306201 0 returned -14
23:10:07 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, 0x0}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

[  401.179302] binder: release 14384:14387 transaction 160 out, still active
[  401.186536] binder: unexpected work type, 4, not freed
[  401.194009] binder: undelivered TRANSACTION_COMPLETE
23:10:07 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYBLOB=',allow_other,fo', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  401.336132] IPVS: ftp: loaded support on port[0] = 21
23:10:07 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  401.394329] binder: send failed reply for transaction 160, target dead
23:10:07 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
dup2(r1, r2)
tkill(r0, 0x16)

23:10:07 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

[  401.544435] binder: release 14409:14410 transaction 164 out, still active
[  401.551588] binder: unexpected work type, 4, not freed
[  401.557226] binder: undelivered TRANSACTION_COMPLETE
23:10:07 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYBLOB=',allow_other,fo', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  401.732510] binder: send failed reply for transaction 164, target dead
23:10:07 executing program 4:
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x1e4}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000010a)

23:10:07 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:10:07 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

[  401.861321] binder: release 14423:14424 transaction 168 out, still active
[  401.868548] binder: unexpected work type, 4, not freed
[  401.874013] binder: undelivered TRANSACTION_COMPLETE
23:10:08 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

[  402.101620] binder: send failed reply for transaction 168, target dead
23:10:08 executing program 2:
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x1e4}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x20000000000000f2)

23:10:08 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:10:08 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:08 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r0, &(0x7f0000000300)="ea18", 0x2, 0x0, 0x0, 0x0)

23:10:08 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYBLOB=',allow_other,fowne', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  402.500725] binder: release 14547:14549 transaction 172 out, still active
[  402.508276] binder: unexpected work type, 4, not freed
[  402.513743] binder: undelivered TRANSACTION_COMPLETE
23:10:08 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c12a41d88b070")
r1 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
write$binfmt_aout(r1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x10004}}, 0x20)

23:10:08 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{0x0}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:08 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0})

[  402.688190] binder: send failed reply for transaction 172, target dead
23:10:08 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYBLOB=',allow_other,fowne', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:08 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'lo\x00'})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000c000000210000000800010073667100480002000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1}}, 0x0)

[  402.875942] binder: release 14563:14565 transaction 176 out, still active
[  402.883146] binder: unexpected work type, 4, not freed
[  402.888497] binder: undelivered TRANSACTION_COMPLETE
23:10:09 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:10:09 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{0x0}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:09 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0})

23:10:09 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYBLOB=',allow_other,fowne', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  403.084033] binder: send failed reply for transaction 176, target dead
23:10:09 executing program 4:
perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
read$rfkill(r0, &(0x7f0000000000), 0x8)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
fcntl$setpipe(r0, 0x407, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea)
splice(r0, 0x0, r3, 0x0, 0x2000000000a, 0x0)

23:10:09 executing program 2:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x1}}, 0x4c080)
setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4)
r2 = open(&(0x7f0000000280)='./file0\x00', 0x110000141042, 0x0)
write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ac"], 0x1)
ftruncate(r2, 0x10099b7)
sendfile(r0, r2, 0x0, 0x88000fbfffffc)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)

[  403.254908] binder: release 14574:14581 transaction 180 out, still active
[  403.262112] binder: unexpected work type, 4, not freed
[  403.267463] binder: undelivered TRANSACTION_COMPLETE
23:10:09 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0})

[  403.384982] binder: send failed reply for transaction 180, target dead
23:10:09 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{0x0}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

[  403.474180] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
23:10:09 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYBLOB=',allow_other,fowner', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  403.550479] binder: release 14595:14596 transaction 184 out, still active
[  403.557843] binder: unexpected work type, 4, not freed
[  403.563274] binder: undelivered TRANSACTION_COMPLETE
23:10:09 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  403.704244] binder: send failed reply for transaction 184, target dead
23:10:09 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

[  403.895573] binder: 14611:14612 got transaction to context manager from process owning it
[  403.904354] binder: 14611:14612 transaction failed 29201/-22, size 0-0 line 2887
[  403.980041] binder: release 14611:14612 transaction 188 out, still active
[  403.987270] binder: unexpected work type, 4, not freed
[  403.992813] binder: undelivered TRANSACTION_COMPLETE
23:10:10 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYBLOB=',allow_other,fowner', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:10 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:10:10 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:10 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  404.282964] binder: undelivered TRANSACTION_ERROR: 29201
[  404.288630] binder: send failed reply for transaction 188, target dead
23:10:10 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x1e4}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x2000000000000116)

23:10:10 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xffffffff80000001, 0x4)
bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000340)="0adc1f123c123f319bc070")
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)

23:10:10 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYBLOB=',allow_other,fowner', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  404.483177] binder: 14636:14637 got transaction to context manager from process owning it
[  404.491834] binder: 14636:14637 transaction failed 29201/-22, size 0-0 line 2887
23:10:10 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

[  404.538025] binder: release 14636:14637 transaction 193 out, still active
[  404.545222] binder: unexpected work type, 4, not freed
[  404.550571] binder: undelivered TRANSACTION_COMPLETE
23:10:10 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  404.741584] binder: undelivered TRANSACTION_ERROR: 29201
[  404.747368] binder: send failed reply for transaction 193, target dead
23:10:10 executing program 4:
r0 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

23:10:10 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  404.890978] binder: 14652:14654 got transaction to context manager from process owning it
[  404.899729] binder: 14652:14654 transaction failed 29201/-22, size 0-0 line 2887
23:10:11 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

[  404.969996] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  404.977845] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  404.986809] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  404.994434] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  405.024485] binder: unexpected work type, 4, not freed
23:10:11 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket(0x2, 0x1, 0x0)
setsockopt(r1, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8)
dup3(r0, r1, 0x80000)

[  405.125653] binder: undelivered TRANSACTION_ERROR: 29201
23:10:11 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:10:11 executing program 2:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0)
request_key(0x0, 0x0, &(0x7f0000000100)='GPL@\x00', 0xfffffffffffffffc)
keyctl$describe(0x6, 0x0, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0))
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200))
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x0})
ioctl(0xffffffffffffffff, 0x0, 0x0)

23:10:11 executing program 4:
r0 = socket$unix(0x1, 0x2, 0x0)
set_mempolicy(0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000180)=[{{&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff}}, 0x13c, 0x0}}], 0x1, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
dup3(r0, r1, 0x0)
accept$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000000c0), 0x163)
openat$null(0xffffffffffffff9c, 0x0, 0x600, 0x0)

23:10:11 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:11 executing program 5:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x80000)
r1 = timerfd_create(0x0, 0x0)
dup3(r1, r0, 0x0)

23:10:11 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:11 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20)

23:10:11 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:11 executing program 5:
perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
read$rfkill(r0, &(0x7f0000000000), 0x8)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
fcntl$setpipe(r0, 0x407, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea)
splice(r0, 0x0, r3, 0x0, 0x2000000000a, 0x0)
mprotect(&(0x7f0000104000/0x3000)=nil, 0x3000, 0x0)

23:10:12 executing program 2:
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0xfffffd82}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x2000000000000148)
pipe(0x0)
write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0)

23:10:12 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:12 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:14 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:10:14 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB, @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:14 executing program 2:
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x8000, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000001c0)={{0x2f, @dev={0xac, 0x14, 0x14, 0xe}, 0x0, 0x2, 'rr\x00', 0x1, 0x40000, 0x15}, {@local, 0x4e24, 0x3, 0x4, 0x81}}, 0x44)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000440))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'erspan0\x00'})
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
r3 = gettid()
ptrace$getenv(0x4201, r3, 0x4, &(0x7f00000003c0))
fsync(r1)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x1ff, 0x4)
openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x800, 0x0)
bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10)
recvmsg(r2, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)
shutdown(r2, 0x1)

23:10:14 executing program 4:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
dup(0xffffffffffffffff)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
inotify_rm_watch(0xffffffffffffffff, 0x0)
clone(0x101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000))

23:10:14 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:14 executing program 5:
accept$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b"], 0x14}}, 0x0)
recvmmsg(r1, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400})

23:10:14 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB, @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:14 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lstat(0x0, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/current\x00', 0x2, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10)
mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000300)=""/75)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

23:10:14 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:14 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB, @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:15 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x0, 0x31d, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14}}}, 0x30}}, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001540)=""/138, 0x8a}, {&(0x7f00000003c0)=""/162, 0xa2}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/129, 0x81}], 0x4}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000042000501000000000000000000000008effffedc74b837c75aa2fd509f77111948c437a7fbc45bc21d291e0c30d75eab0b351ac09239506d5f09e0399dedf214a490e980868c74be37337d8461b2a8f794d4031eb8700d6e0aac9898729b7ac2894c6a10f9df787d20b95b0fbd66b82ccfa6959a5a5865ed4852cc7ca11ebed886e81d7f169753550c7529bb4a33fc106b8fd53ed4cf5d5289b74235985d3d8e19128f"], 0x1}}, 0x0)

23:10:15 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:17 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:10:17 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xc, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0xffffffc4}}, &(0x7f0000014ff5)='syzka\x00\x00\x00\x05\x00\xf3', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000030c0), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x2}, 0x50)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x8, 0x1}}, 0x30)

23:10:17 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040))
write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34)
write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
fallocate(r1, 0x3, 0xc000, 0x80000003)

23:10:17 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',allow_oth', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:17 executing program 4:
clone(0x800000007fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = inotify_init1(0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
fchdir(r1)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = memfd_create(&(0x7f0000000140)='\r\xd6J\xf4sn}1\xd4@v\xf4\xads\x05\xca\xb1\xa0\x97\xc3o9+W\x850\xba\xae\x1a\xc9M\xafs\x14\xbb#\xab\xf8\xd9%\x14!\xf8\xb2\x89\x7fS$4\f\xe0_{bJ\xbfD\x8a\x00xp', 0x0)
write(r3, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
dup2(r2, r0)
mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)

23:10:17 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:17 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',allow_oth', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:17 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:17 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_emit_ethernet(0x140, &(0x7f0000000040)={@local, @empty=[0x7, 0x4, 0x1000000, 0x8906, 0xfdffffff00000000, 0xb00000000000006], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}, @dccp={{0x0, 0x0, 0x4, 0x60, 0x0, 0x0, 0x3, 0x0, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, 0x0)

23:10:17 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x10031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="2c0271ca8b080aae3300bfa4def38003c21c104094", 0x15}], 0x1}, 0xc100)
sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002e00)="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", 0x2b7}], 0x1}, 0x8000)
sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="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", 0x2d5}], 0x1}, 0x0)

23:10:18 executing program 5:
r0 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
setresuid(r1, 0x0, 0x0)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

23:10:18 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'lo\x00'})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000c000000210000000800010073667100480002000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1}}, 0x0)

23:10:18 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',allow_oth', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:20 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:10:20 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:20 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:20 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',allow_other,fo', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:20 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070")
r1 = socket(0x2, 0x802, 0x0)
r2 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0)
ftruncate(r2, 0x8007ffc)
sendfile(r1, r2, 0x0, 0x400008bca)

23:10:20 executing program 5:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x1e4}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x2000000000000148)
writev(0xffffffffffffffff, 0x0, 0x0)

23:10:20 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:20 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',allow_other,fo', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  414.807973] kvm [14947]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
23:10:21 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00'})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000008000100"], 0x1}}, 0x0)

23:10:21 executing program 5:

23:10:21 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:21 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',allow_other,fo', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  415.340137] kvm [14973]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
23:10:23 executing program 5:

23:10:23 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:10:23 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:23 executing program 2:

23:10:23 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',allow_other,fowne', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:23 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:23 executing program 2:

23:10:23 executing program 5:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0x1f, &(0x7f00000000c0)=""/150, &(0x7f0000000000)=0x96)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000002900)='/dev/null\x00', 0x80000, 0x0)
preadv(r1, &(0x7f0000002700)=[{&(0x7f0000000480)=""/148, 0x94}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000380)=""/45, 0x2d}, {&(0x7f0000001540)=""/149, 0x95}, {0x0}, {&(0x7f0000002600)=""/204, 0xcc}], 0x6, 0x0)
r2 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff)
signalfd4(r2, &(0x7f0000000140)={0x6}, 0x8, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
dup(r3)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r3)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000280)=0x7f, 0x4)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000200)={0xb8d, 0x2}, 0x2)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000002c0)={0x26b7, {{0xa, 0x4e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x16}}, 0x1f000000}}}, 0x88)
r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x2007fff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106})
ioctl$sock_ifreq(r6, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1})
dup3(r5, r7, 0x0)

[  417.875883] kvm [14989]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
23:10:24 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:24 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',allow_other,fowne', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:24 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

[  418.097785] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
23:10:24 executing program 2:
r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0xa0000)
ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000080)={0x3, 0x0, [{}, {}, {}]})
openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x3, 0x4)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x2a0, 0x0)
fstat(0xffffffffffffffff, 0x0)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
getpid()
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0)
getpgrp(0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='bbr\x00', 0x4)
ftruncate(r4, 0x7fff)
sendfile(r2, r4, 0x0, 0x8000fffffffe)

23:10:24 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',allow_other,fowne', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  418.345673] kvm [15011]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
23:10:26 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:10:26 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:26 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:26 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',allow_other,fowner', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:26 executing program 2:
r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0xa0000)
ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000080)={0x3, 0x0, [{}, {}, {}]})
openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x3, 0x4)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x2a0, 0x0)
fstat(0xffffffffffffffff, 0x0)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
getpid()
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0)
getpgrp(0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='bbr\x00', 0x4)
ftruncate(r4, 0x7fff)
sendfile(r2, r4, 0x0, 0x8000fffffffe)

23:10:26 executing program 5:

23:10:27 executing program 5:

23:10:27 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

[  421.068164] kvm [15033]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
23:10:27 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',allow_other,fowner', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:27 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:27 executing program 5:

23:10:27 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:30 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:10:30 executing program 2:
r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0xa0000)
ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000080)={0x3, 0x0, [{}, {}, {}]})
openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x3, 0x4)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x2a0, 0x0)
fstat(0xffffffffffffffff, 0x0)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
getpid()
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0)
getpgrp(0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='bbr\x00', 0x4)
ftruncate(r4, 0x7fff)
sendfile(r2, r4, 0x0, 0x8000fffffffe)

23:10:30 executing program 5:

23:10:30 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:30 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:30 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
r1 = getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',allow_other,fowner', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:30 executing program 5:

23:10:30 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:30 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:30 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:30 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:10:30 executing program 5:

23:10:30 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001900010000000000000000000a94000000000000000000000000c5af8d4340cfd434a8ff56a17ba8e1adfd501a0d6400000000000000000000000000", @ANYRES32=0x0], 0x2}}, 0x0)

23:10:30 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:30 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:10:30 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = open(0x0, 0x10000, 0x20)
ioctl$PIO_FONTX(r1, 0x4b6c, 0x0)
write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
getgid()
listen(r2, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
r3 = accept(r2, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
fcntl$getflags(0xffffffffffffffff, 0x0)
ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000000)=0x80000000)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
ioctl$KDADDIO(r1, 0x4b34, 0x20)
getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x10)
sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0)

23:10:30 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:30 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:30 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001b40)=@allocspi={0xf8, 0x16, 0x311, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@local, 0x0, 0x6c}, @in6, {}, {}, {}, 0x70bd25}}}, 0xf8}, 0x8, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001a00)={0x10, 0x0, &(0x7f0000001480)=[@free_buffer, @register_looper], 0xd8, 0x0, &(0x7f0000001900)="ce44fbc3533f49925fb9d612d0bbfa4c50d871c6bfddacb5291d56e921143dba3f899b182d2f13a51f19b2a14f9a71f313c3f0ffa17495b8527c936fc93bd269dd8ea2106accbce588cc9387be60b63de0263256d34b044ee4519164b86028cbd7eeb0342540bc8e736bda1e8f26ee6f8abe6ea5f7bd0eb4fde9e0bb485c3ef8906552e88eeb846f6bb8ff88200995c3ea3771fe98ea3bdbb6011a84ab0188dd60d3b64cc0dc14507f4982271719570ff3bcff0f2bdd6983744d235e63ba72ee2da6e5dbc89a56b0cc02ea0ef63fa50fd82ff66121699a2d"})

23:10:31 executing program 5:
socket$l2tp(0x18, 0x1, 0x1)
r0 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f0000000040)=r0, 0x4)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e88, 0x0, @mcast2={0xff, 0x2, [0xe82b]}, 0xd}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0)

23:10:31 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:10:31 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  425.120437] kvm [15220]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
23:10:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
poll(&(0x7f0000000080)=[{r2, 0x4002}, {r2}, {}], 0x3, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000640)={"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"})
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x2)
ioctl$KVM_RUN(r3, 0xae80, 0xfdfdffff00000000)

23:10:31 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:31 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:31 executing program 5:
munmap(&(0x7f0000551000/0x2000)=nil, 0x2000)
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0xfffffde0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0)

23:10:31 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB, @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:31 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:31 executing program 2:
recvmmsg(0xffffffffffffffff, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000fc0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000010a)

23:10:31 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:31 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB, @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:31 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

[  426.086126] kvm [15267]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
23:10:34 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:10:34 executing program 2:
unshare(0xc020000)
unshare(0x8000400)

23:10:34 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB, @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:34 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:34 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:34 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x100000001, 0x197)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
pipe(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000080))
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0)
stat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000e40))
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:10:34 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:34 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:34 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',allow_oth', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:34 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:34 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)

23:10:34 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:37 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:10:37 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:37 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:37 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',allow_oth', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:37 executing program 2:
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000000c0)={@my})
munmap(&(0x7f0000551000/0x2000)=nil, 0x2000)
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0xfffffde0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0)

23:10:37 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x100000001, 0x197)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
fremovexattr(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000180))
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r3=>0x0})
readlinkat(r2, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
lstat(&(0x7f00000005c0)='./file0\x00', 0x0)
stat(0x0, &(0x7f0000000ac0))
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:10:37 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:37 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',allow_oth', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:37 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:37 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:37 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:38 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',allow_other,fo', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:40 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
ioctl$int_in(0xffffffffffffffff, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(0xffffffffffffffff, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
tkill(r0, 0x16)

23:10:40 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:40 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:40 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',allow_other,fo', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:40 executing program 2:
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
setrlimit(0x0, 0x0)
clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246)
write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2)
close(r0)
r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0)
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1)

23:10:40 executing program 5:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x2a02, 0x0)
socketpair$unix(0x1, 0x80000000000003, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0x28c)

23:10:40 executing program 2:
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
syz_open_dev$usb(0x0, 0x0, 0x0)
clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246)
write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2)
close(r0)
r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0)
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1)

23:10:40 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',allow_other,fo', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:40 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly}, 0x2b82e)

23:10:40 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x40, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
close(r0)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0)
getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4)

23:10:40 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:41 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0)

[  434.955083] kvm [15411]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
23:10:43 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
ioctl$int_in(0xffffffffffffffff, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(0xffffffffffffffff, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
tkill(r0, 0x16)

23:10:43 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',allow_other,fowne', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:43 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:43 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0)

23:10:43 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f319bc070")
r1 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0x4, &(0x7f0000000000), 0x4)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x10)
sendto$unix(r1, 0x0, 0x0, 0x8000, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)
sendmsg$unix(r1, &(0x7f0000000900)={&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000001900)="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", 0x12c}], 0x1}, 0x0)

23:10:43 executing program 2:
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x1000000000800, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x20)

[  437.769925] kvm [15429]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
23:10:43 executing program 2:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200))
creat(0x0, 0x0)

23:10:43 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0)

23:10:43 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',allow_other,fowne', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:43 executing program 5:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
read(r1, &(0x7f0000000600)=""/11, 0xb)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140))
dup2(r1, r0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
r3 = dup2(r2, r2)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x20)
ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0)

23:10:44 executing program 4:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

[  438.114928] kvm [15451]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
23:10:44 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)

23:10:46 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
ioctl$int_in(0xffffffffffffffff, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(0xffffffffffffffff, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
tkill(r0, 0x16)

23:10:46 executing program 4:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:46 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)

23:10:46 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',allow_other,fowne', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:46 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x17}, 0x1c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
syz_open_dev$dspn(0x0, 0x5, 0xc000)
sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x2ed, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0)

23:10:46 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000140))

[  440.869771] kvm [15482]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
23:10:47 executing program 4:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:47 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)

23:10:47 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',allow_other,fowner', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000100)={0x8, 0x7f, 0x3f})
poll(&(0x7f0000000080)=[{r3, 0x4002}, {r3}, {}], 0x3, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x2081}, {}, {}], 0x3, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000640)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10010174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c888c9ff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"})
ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x2)
ioctl$KVM_RUN(r4, 0xae80, 0xfdfdffff00000000)

[  441.244888] kvm [15495]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
23:10:47 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000100)={0x8, 0x7f, 0x3f})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000640)={"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"})
ioctl$KVM_RUN(r3, 0xae80, 0xfdfdffff00000000)

23:10:47 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',allow_other,fowner', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:49 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r0, 0x8, 0x0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r0, 0xa, 0x12)
dup2(r0, r1)
tkill(0x0, 0x16)

23:10:49 executing program 4:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:49 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getegid()
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040)=ANY=[@ANYBLOB="000004000000000003909c1a0f7ed1f4cb70a91ef6578aa1"], 0x1)
connect$inet6(r0, &(0x7f00000000c0), 0x1c)
sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810)

23:10:49 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',allow_other,fowner', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:49 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b34, &(0x7f0000000000)='wlan0\x00\xd3\xeb\'\xe4\xd5\xd1s\b\x8c\xba\x00\x00@\x00\x00\x00\x00\x00(\x00\x03\x00 \x1cs\n\xcc]\xfb\xe9i]\xb9\xfc\xae\xd03\x00\x00\x00\x00\x00\x00\x00\b\xb4\x8f\x03\x00\x00\xf6L\x00\x00\xd5\x98\xba\xc4n\xd4\xf3(eq]\x812\xc3\x8e\x88\x00\x00\x00\x00\x00\xff\xff\x00')

23:10:49 executing program 5:
getgroups(0x0, 0x0)
fchown(0xffffffffffffffff, 0x0, 0x0)
clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246)
write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2)
close(r0)
r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0)
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1)

23:10:50 executing program 5:
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0)
timer_settime(0x0, 0x0, 0x0, &(0x7f0000000080))

23:10:50 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  444.086187] kvm [15531]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
23:10:50 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x17}, 0x1c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x2ed, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0)

23:10:50 executing program 3:
syz_open_dev$usb(0x0, 0x0, 0x0)
clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246)
write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2)
close(r0)
r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0)
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500)='/dev/hwrng\x00', 0x581, 0x0)

23:10:50 executing program 4:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:50 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2f, 'cpu'}]}, 0x5)

[  444.447805] kvm [15555]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
23:10:50 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r0, 0x8, 0x0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r0, 0xa, 0x12)
dup2(r0, r1)
tkill(0x0, 0x16)

23:10:50 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:50 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
clock_gettime(0x0, &(0x7f0000000900))
r1 = accept$alg(r0, 0x0, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000a40)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
fstat(r1, &(0x7f0000000480))
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, &(0x7f0000000200)=0xffffffffffffff03)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000100)=<r3=>0x0)
ptrace$setregs(0xf, r3, 0x200, &(0x7f00000001c0)="947236a3de7d1b26636c5d64e85ea7ac22c77ead357f7fa3a928ac9dea7863c2bacc8082a468b4aa9e6539")
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x8, 0x1)
socket$rxrpc(0x21, 0x2, 0xa)
syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x9, 0x400)
recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xf}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680})

23:10:50 executing program 4:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

[  444.956187] kvm [15569]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
23:10:51 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:51 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:51 executing program 3:
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x1e4}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
writev(r1, &(0x7f00000000c0), 0x200000000000010a)

23:10:51 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000100)={0x8, 0x7f, 0x3f})
poll(&(0x7f0000000080)=[{r3, 0x4002}, {r3}, {}], 0x3, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000640)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10010174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c888c9ff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"})
ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x2)
ioctl$KVM_RUN(r4, 0xae80, 0xfdfdffff00000000)

[  445.372612] kvm [15592]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
23:10:51 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x40000000000002f, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

23:10:51 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:51 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82)
r1 = memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x40000, 0x0)
sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)

23:10:51 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

[  445.802494] kvm [15613]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
23:10:51 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r0, 0x8, 0x0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r0, 0xa, 0x12)
dup2(r0, r1)
tkill(0x0, 0x16)

23:10:51 executing program 3:

23:10:51 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:52 executing program 5:

23:10:52 executing program 2:

23:10:52 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:52 executing program 3:

23:10:52 executing program 5:

[  446.338245] kvm [15638]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
23:10:52 executing program 2:

23:10:52 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:52 executing program 5:

23:10:52 executing program 3:

23:10:52 executing program 1:
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:10:52 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:52 executing program 5:

23:10:52 executing program 2:

23:10:52 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',allow_oth', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:52 executing program 3:

23:10:53 executing program 2:

23:10:53 executing program 5:

23:10:53 executing program 3:
r0 = socket(0x10, 0x20000000000003, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001a0001420000000000000000000400006c74320fc17827436b7c"], 0x1}}, 0x0)
recvmmsg(r0, &(0x7f0000000c40)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)=""/253, 0xfd}, {&(0x7f0000000280)=""/229, 0xe5}, {&(0x7f0000000380)=""/57, 0x39}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f00000004c0)=""/210, 0xd2}, {&(0x7f00000005c0)=""/174, 0xae}], 0x7, &(0x7f00000006c0)=""/12, 0xc}, 0x1f}, {{&(0x7f0000000700)=@tipc=@id, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000780)=""/105, 0x69}, {&(0x7f0000000800)=""/173, 0xad}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/83, 0x53}, {&(0x7f0000000940)=""/219, 0xdb}, {&(0x7f0000000a40)=""/29, 0x1d}, {&(0x7f0000000a80)=""/94, 0x5e}], 0x7, &(0x7f0000000b40)=""/255, 0xff}, 0x8}], 0x2, 0x0, &(0x7f0000000c80)={0x77359400})

[  447.048305] kvm [15668]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
23:10:53 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',allow_oth', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:53 executing program 1:
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:10:53 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:53 executing program 2:

23:10:53 executing program 5:

23:10:53 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',allow_oth', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:53 executing program 2:

[  447.574240] kvm [15688]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
23:10:53 executing program 1:
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:10:53 executing program 5:

23:10:53 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:53 executing program 2:

[  448.039489] kvm [15707]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
23:10:54 executing program 3:

23:10:54 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',allow_other,fo', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:54 executing program 1:
mknod(0x0, 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:10:54 executing program 5:

23:10:54 executing program 2:

23:10:54 executing program 5:

23:10:54 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:54 executing program 3:

23:10:54 executing program 1:
mknod(0x0, 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:10:54 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',allow_other,fo', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:54 executing program 5:

23:10:54 executing program 2:

23:10:54 executing program 3:

23:10:54 executing program 5:

23:10:54 executing program 1:
mknod(0x0, 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:10:55 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',allow_other,fo', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:55 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:55 executing program 2:

23:10:55 executing program 3:

23:10:55 executing program 5:

23:10:55 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:10:55 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',allow_other,fowne', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  449.294758] kvm [15762]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
23:10:55 executing program 2:

23:10:55 executing program 3:

23:10:55 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:55 executing program 5:

23:10:55 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',allow_other,fowne', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:55 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

[  449.755207] kvm [15785]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
23:10:55 executing program 2:

23:10:55 executing program 3:

23:10:55 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',allow_other,fowne', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:55 executing program 5:

23:10:56 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:56 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:10:56 executing program 2:

23:10:56 executing program 5:

23:10:56 executing program 3:

23:10:56 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',allow_other,fowner', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:56 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:56 executing program 2:

23:10:56 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:10:56 executing program 5:

23:10:56 executing program 3:

23:10:56 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:56 executing program 2:

23:10:56 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',allow_other,fowner', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:56 executing program 5:

23:10:56 executing program 3:

23:10:57 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',allow_other,fowner', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:57 executing program 2:

23:10:57 executing program 5:

23:10:57 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:59 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:10:59 executing program 3:

23:10:59 executing program 5:

23:10:59 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:10:59 executing program 2:

23:10:59 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:59 executing program 2:

23:10:59 executing program 5:

23:10:59 executing program 3:

23:10:59 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:10:59 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:00 executing program 5:

23:11:02 executing program 3:

23:11:02 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:02 executing program 2:

23:11:02 executing program 5:

23:11:02 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:11:02 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

[  456.791192] kvm [15897]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
23:11:02 executing program 3:

23:11:02 executing program 2:

23:11:03 executing program 5:

23:11:03 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:03 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:11:03 executing program 5:

[  457.236880] kvm [15916]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
23:11:05 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(0xffffffffffffffff, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
tkill(r0, 0x16)

23:11:05 executing program 3:

23:11:05 executing program 2:

23:11:05 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:05 executing program 5:

23:11:05 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

[  459.978430] kvm [15933]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
23:11:06 executing program 3:

23:11:06 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02\x04\x00u\x9aL\xc9\xe2\xd1p\x00', 0x2761, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffe}, 0x48)
r0 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000))

23:11:06 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
setrlimit(0x7, &(0x7f0000000040))
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

23:11:06 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:06 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:11:06 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f0000000000)={&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0)

23:11:09 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(0xffffffffffffffff, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
tkill(r0, 0x16)

23:11:09 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="bf16000000000000b707000001003000487000000000e0ff40000000000000009500000200000000"], 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xf, 0x0, &(0x7f0000000100)="45a61212a20e292982a393239716cc", 0x0, 0x3fb}, 0x28)

23:11:09 executing program 5:

23:11:09 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',allow_oth', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:09 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:11:09 executing program 3:

23:11:09 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80)
r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0)
ftruncate(r0, 0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x802, 0x0)
sendfile(r1, r0, 0x0, 0x40800fff)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x2dc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0)

23:11:09 executing program 3:
r0 = socket(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@empty, 0x0, r1})

23:11:09 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x1e4}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x2000000000000148)
setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

23:11:09 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',allow_oth', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:09 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:11:09 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"v\x19n{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
lseek(r1, 0x20400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf, 0x1f, 0x1d}, 0x2000008f)

23:11:12 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(0xffffffffffffffff, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
tkill(r0, 0x16)

23:11:12 executing program 3:
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
sendmsg(r1, &(0x7f0000000400)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x4c, &(0x7f0000000000), 0x3bf}, 0x0)
recvmmsg(r0, &(0x7f0000007a40)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000980)=""/75, 0x4b}], 0x1}}], 0x1, 0x10100, &(0x7f0000007cc0)={0x77359400})

23:11:12 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',allow_oth', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:12 executing program 2:
epoll_create1(0x0)
flock(0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
flock(r0, 0x100000000000001)

23:11:12 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:11:12 executing program 5:
r0 = epoll_create1(0x0)
flock(r0, 0x2)

23:11:12 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=ANY=[@ANYBLOB="6e618531673774000001000000d4dcafb00b3f9046dbb77487e90104000000000040800000000000001b2300000503000018030000cc000000ac010000000000001004d1e090e1fe916dd282e0f34f8dfac0dc1695c4d700001004000010040002d32379b87c5ade6e27a603551ae6543351c2f2d3c00f3f72e211777424c9814f1f852110e5d4a50b060000006b63012812d04b94d660aab341cfe8364422b866cd445d5d0f4d6715ba085b009dc7eac00000000000000000000071"], 0x1)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r2, 0x3c)

23:11:12 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)

23:11:12 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',allow_other,fo', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:12 executing program 3:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0x1f, &(0x7f00000000c0)=""/150, &(0x7f0000000000)=0x96)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000002900)='/dev/null\x00', 0x80000, 0x0)
preadv(r1, &(0x7f0000002700)=[{&(0x7f0000000480)=""/148, 0x94}, {&(0x7f0000000540)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001540)=""/149, 0x95}, {0x0}], 0x5, 0x0)
r2 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff)
signalfd4(r2, &(0x7f0000000140)={0x6}, 0x8, 0x0)
r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
dup(0xffffffffffffffff)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000002c0)={0x26b7, {{0xa, 0x4e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x16}}, 0x1f000000}}}, 0x88)
r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x2007fff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106})
ioctl$sock_ifreq(r6, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1})
dup3(r5, r7, 0x0)
getsockopt$inet6_int(r3, 0x29, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, 0x0)
setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0)

23:11:12 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:11:12 executing program 5:
perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
read$rfkill(r0, &(0x7f0000000000), 0x8)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
fcntl$setpipe(r0, 0x407, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea)
splice(r0, 0x0, r3, 0x0, 0x2000000000a, 0x0)
mprotect(&(0x7f0000104000/0x3000)=nil, 0x3000, 0x0)

23:11:15 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(0xffffffffffffffff, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:11:15 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
r1 = dup(r0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0)
write$P9_RWALK(r1, 0x0, 0x0)

23:11:15 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',allow_other,fo', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:15 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:11:15 executing program 3:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_getres(0xffff7ffffffffff2, 0x0)

23:11:15 executing program 5:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
pipe(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$nbd(r2, &(0x7f00000016c0)=ANY=[@ANYRESOCT], 0x1)
splice(r1, 0x0, r0, 0x0, 0x8, 0x0)

23:11:15 executing program 2:
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000640)=""/184, 0xb8}, {0x0}], 0x2}}], 0x1, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, 0x0, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0)

23:11:15 executing program 5:
r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0xa0000)
ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000080)={0x3, 0x0, [{}, {}, {}]})
openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x3, 0x4)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x2a0, 0x0)
fstat(0xffffffffffffffff, 0x0)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
getpid()
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0)
getpgrp(0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='bbr\x00', 0x4)
ftruncate(r4, 0x7fff)
sendfile(r2, r4, 0x0, 0x8000fffffffe)

23:11:15 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',allow_other,fo', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:15 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, 0x0)

23:11:15 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"v\x19n{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
lseek(r1, 0x20400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf, 0x1f, 0x22}, 0x2000008f)

23:11:15 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000640)=""/184, 0xb8}], 0x1}}], 0x1, 0x0, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0)

23:11:18 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(0xffffffffffffffff, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:11:18 executing program 2:
r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000))
write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="e1"], 0x1)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
close(r0)

23:11:18 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, 0x0)

23:11:18 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',allow_other,fowne', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:18 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000000)=""/43, 0x2b}, {&(0x7f0000000300)=""/184, 0xb8}], 0x2, 0x0)
mknod(&(0x7f0000000040)='./bus\x00', 0x8003, 0xa6134)
r0 = open(&(0x7f0000001ac0)='./bus\x00', 0x2, 0x0)
pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0)
pwritev(r0, &(0x7f0000000280), 0x96, 0x0)

23:11:18 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="bf16000000000000b70700000100000050700000000000ff20000000000000009500000000000000"], 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0x12, 0x0, &(0x7f0000000d80)="5010e88e394ecec9d0ca217ed8cb6ea088ac", 0x0, 0x2}, 0x28)

23:11:18 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',allow_other,fowne', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:18 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000952000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f)
write(r2, &(0x7f00000001c0), 0x100000073)
sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x0, 0x0)
getpid()
socket$inet6(0xa, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
read(r1, &(0x7f0000000200)=""/250, 0x50c7e61b)

23:11:18 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, 0x0)

23:11:18 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
fadvise64(r0, 0x0, 0xe250, 0x5)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
inotify_init1(0x800)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8)
inotify_init1(0x80800)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0xf0)
sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, <r3=>0x0})
sched_getscheduler(r3)

23:11:18 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',allow_other,fowne', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:18 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x0, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:11:21 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(0xffffffffffffffff, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:11:21 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x2000004e20, @dev}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='ifb0\x00', 0xfffffffffffffeee)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0x7ffffffffc, 0x37a)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendto$inet(r0, &(0x7f0000000240), 0x13f698e4b9e296e3, 0x0, 0x0, 0xffffffffffffff06)
r1 = socket$netlink(0x10, 0x3, 0x4000000000000004)
close(r0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1)

23:11:21 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
unshare(0x8020000)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00')
semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x1800}], 0x1)
setns(r1, 0x0)

23:11:21 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x0, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

23:11:21 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600))
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0)={0x3ff, 0x0, 0x0, 0x92b6})
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0xff46})

23:11:21 executing program 3:
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xb)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000005c0)={0x6, {{0xa, 0x0, 0x7, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, 0x88)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0)={0x3, 0x101, 0x0, 0x4, 0x9}, 0x14)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f0000001380), 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400})

23:11:21 executing program 5:
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="7365637572697479000000000001000100000800000000007c9900000000000000000e00abba00000000000000006801005c03aa87f984d21c"], 0x1)
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2f)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0))
ptrace$cont(0x1f, r0, 0x0, 0x0)

23:11:21 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x0, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4900], [0xc2]})

[  475.838023] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  475.845969] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
23:11:22 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000001feffff7a0af0fff8ffffff79a4f0ff00000000b70600000018d1fe2d6405000000000025060400010000000704000009000000b7050000000000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x48)

[  476.052599] ptrace attach of "/root/syz-executor.5"[16201] was attempted by "/root/syz-executor.5"[16204]
23:11:22 executing program 5:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0)

[  476.232033] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  476.239825] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  476.275833] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  476.283703] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  476.616734] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  476.624458] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  476.729530] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  476.737356] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  476.756442] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  476.764323] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  476.975273] IPVS: ftp: loaded support on port[0] = 21
[  477.052281] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  477.059889] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  477.091327] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  477.098987] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  477.307670] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  477.315476] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  477.329287] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  477.336944] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  477.542908] device bridge_slave_1 left promiscuous mode
[  477.548774] bridge0: port 2(bridge_slave_1) entered disabled state
[  477.674046] device bridge_slave_0 left promiscuous mode
[  477.679992] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.514289] device hsr_slave_1 left promiscuous mode
[  483.567098] device hsr_slave_0 left promiscuous mode
[  483.607199] team0 (unregistering): Port device team_slave_1 removed
[  483.618384] team0 (unregistering): Port device team_slave_0 removed
[  483.630516] bond0 (unregistering): Releasing backup interface bond_slave_1
[  483.667780] bond0 (unregistering): Releasing backup interface bond_slave_0
[  483.757457] bond0 (unregistering): Released all slaves
[  483.865001] chnl_net:caif_netlink_parms(): no params data found
[  483.910668] bridge0: port 1(bridge_slave_0) entered blocking state
[  483.917318] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.925873] device bridge_slave_0 entered promiscuous mode
[  483.934762] bridge0: port 2(bridge_slave_1) entered blocking state
[  483.941333] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.949404] device bridge_slave_1 entered promiscuous mode
[  483.978798] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  483.990631] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  484.016158] team0: Port device team_slave_0 added
[  484.023975] team0: Port device team_slave_1 added
[  484.084877] device hsr_slave_0 entered promiscuous mode
[  484.142272] device hsr_slave_1 entered promiscuous mode
[  484.247705] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.254242] bridge0: port 2(bridge_slave_1) entered forwarding state
[  484.261129] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.267729] bridge0: port 1(bridge_slave_0) entered forwarding state
[  484.338382] 8021q: adding VLAN 0 to HW filter on device bond0
[  484.358981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  484.368858] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.378088] bridge0: port 2(bridge_slave_1) entered disabled state
[  484.388157] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  484.408392] 8021q: adding VLAN 0 to HW filter on device team0
[  484.425699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  484.434465] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.440975] bridge0: port 1(bridge_slave_0) entered forwarding state
[  484.487105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  484.495562] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.502156] bridge0: port 2(bridge_slave_1) entered forwarding state
[  484.512167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  484.521500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  484.536946] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  484.545693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  484.565077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  484.576872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  484.586628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  484.632311] 8021q: adding VLAN 0 to HW filter on device batadv0
23:11:30 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',allow_other,fowner', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:30 executing program 2:
r0 = socket$inet6(0xa, 0x4000000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
sendmmsg(r0, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e24, @multicast2}, 0x80, 0x0}}], 0x1, 0x0)

23:11:30 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b], [0xc2]})

23:11:30 executing program 5:
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)="d480", 0x2}], 0x1}, 0x808000)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)="b909d6b3e8a0", 0x6}], 0x1}, 0x0)

23:11:30 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x0, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:11:30 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)
shutdown(r0, 0x1)

[  484.887298] kvm [16248]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
23:11:31 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)

23:11:31 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',allow_other,fowner', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:31 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b], [0xc2]})

23:11:31 executing program 5:
syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0)
r0 = gettid()
timer_create(0x0, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000))
tkill(r0, 0x1004000000016)

23:11:31 executing program 3:
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}, @IFLA_NET_NS_PID={0x8}]}, 0x38}}, 0x0)

23:11:31 executing program 2:
socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x7, 0x9}, &(0x7f0000000100)=0xc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x40000000)
fchmodat(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000040)={0x3})

[  485.308654] kvm [16270]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
23:11:31 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',allow_other,fowner', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:31 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x1b], [0xc2]})

23:11:31 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @dev, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0x1a}, 0x2c)

23:11:31 executing program 3:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={[0xfeffffff, 0x900], 0x0, 0x5, 0x78b})
ioctl$BLKTRACETEARDOWN(r0, 0x1275, 0x0)

[  486.156323] IPVS: ftp: loaded support on port[0] = 21
[  486.218179] IPVS: ftp: loaded support on port[0] = 21
23:11:33 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x0, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:11:33 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:33 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x0, 0x4900], [0xc2]})

23:11:33 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
poll(&(0x7f0000000080)=[{r2, 0x4002}, {r2}, {}], 0x3, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
poll(0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000640)={"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"})
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x2)
ioctl$KVM_RUN(r3, 0xae80, 0xfdfdffff00000000)

23:11:33 executing program 3:
r0 = socket(0x2, 0x3, 0x67)
sendmsg$unix(r0, &(0x7f0000001b40)={&(0x7f0000001200)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0x0)

23:11:33 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = memfd_create(&(0x7f0000000000)='#}\x00\x9a\x1b\xc2_R\xea\xd3\xddT\xd0\xec;\xa4\x9dV>\xa4\x11\xa4\xac\x9e\x1e\xac\xaaT\xd5\xd3\xf8<\xd7Yb\x04I\xdct,&\xe90\xa8\xaf\xff\xd3\xcd\xcd-\x90\'\xa2v\xbal\xa3l\"\xa0G\xebD\x1d\x8c\x8e\x15\x8d``\xb2\xdb\x9e\'\xef_\xde?i\xacl\x03\xaa\xdc(\x96\xbed\x9b\x1d\x95\x13\xbe\xe7\xb8\xa3\x13>\xdd}\x87\xc7Y\xf1\x92\xe3BIky\xe8\x85\xe9^\x1d\xb2\xd2Ycn\x9d\xafQ\xb1\x02\x99z\x81\xff\xc2\xdd)\xfe\'\xb8\"X@\xd6,\xb5\xa6\xa2\xe1:\xecG\x1d\xfe\x86\x85\xe7\xd4\xf6!C\xa3\xcf\xf3S\xeaA\xd7\x11\xc9O\x8e+\x94\x8c\x1f\xd6\x88\x97\xd0\xdd*\x90)\"\xda', 0x2)
ftruncate(r2, 0x40001)
sendfile(r0, r2, 0x0, 0x100000000002)
fcntl$addseals(r2, 0x409, 0x8)
dup2(r2, r1)

23:11:34 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:34 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x200000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
r1 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffa000/0x1000)=nil)
shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil)
shmget(0x3, 0x1000, 0x100, &(0x7f0000ffe000/0x1000)=nil)
r2 = shmget$private(0x0, 0x3000, 0xa00, &(0x7f0000ff9000/0x3000)=nil)
shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000440)=""/19)
r3 = socket$inet(0x2, 0x3, 0x2)
r4 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x3ff, 0x1)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000000340))
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0)
getsockname(r5, &(0x7f0000000140)=@ipx, &(0x7f0000000500)=0x1b)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000002000)={@loopback, 0x32, r6})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000100)=0x6, 0x8)
setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
r7 = dup2(r3, r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BLKGETSIZE64(r5, 0x80081272, &(0x7f00000004c0))
r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0)
pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r9)
ioctl$KVM_SET_SIGNAL_MASK(r7, 0x4004ae8b, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"])
accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800)
ioctl$SCSI_IOCTL_DOORLOCK(r7, 0x5380)

23:11:34 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)

23:11:34 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:34 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x0, 0x4900], [0xc2]})

23:11:34 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4, 0x10070, 0x0, 0xffffffffffffffff, 0x0, [0x12f]}, 0x2c)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)

23:11:37 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:37 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000180)="ee", 0x0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10)

23:11:37 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x0, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:11:37 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000100)={0x8, 0x7f, 0x3f})
poll(&(0x7f0000000080)=[{r3, 0x4002}, {}, {}], 0x3, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000640)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10010174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c888c9ff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"})
ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x2)
ioctl$KVM_RUN(r4, 0xae80, 0xfdfdffff00000000)

23:11:37 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x1b, 0x0, 0x0, 0x4900], [0xc2]})

23:11:37 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = timerfd_create(0x0, 0x0)
timerfd_settime(r1, 0x3, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000000fe0))

23:11:37 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = timerfd_create(0x0, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000000fe0))

23:11:37 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000100)={0x8, 0x7f, 0x3f})
poll(&(0x7f0000000080)=[{r3, 0x4002}, {r3}, {}], 0x3, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000640)={"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"})
ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x2)
ioctl$KVM_RUN(r4, 0xae80, 0xfdfdffff00000000)

23:11:37 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x0, 0x0, 0x1b, 0x4900], [0xc2]})

23:11:37 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:37 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x20051, r0, 0x0)
clone(0xa0000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

23:11:37 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:37 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30)
read$FUSE(r0, &(0x7f00000030c0), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x1000000000}}, 0x50)

23:11:40 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, 0x0)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:11:40 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000100)={0x0, 0x7f, 0x3f})
poll(&(0x7f0000000080)=[{r2}, {}], 0x2, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
poll(&(0x7f00000001c0)=[{}, {}, {r1}], 0x3, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000640)={"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"})
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x2)
ioctl$KVM_RUN(r3, 0xae80, 0xfdfdffff00000000)

23:11:40 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x11)

23:11:40 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_oth', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:40 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x0, 0x0, 0x1b, 0x4900], [0xc2]})

23:11:40 executing program 2:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000080))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
close(r1)

23:11:40 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_oth', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:40 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b34, &(0x7f0000000000)='wlan0\x00\xd3\xeb\'\xe4\xd5\xd1s\b\x8c\xba\x00\x00@\x02\x00\x00\x00\x00(\x00\x03\x00 \x1cs\n\xcc]\xfb\xe9i]\xb9\xfc\xae\xd03\x00\x00\x00\x00\x00\x00\x00\b\xb4\x8f\x03\x00\x00\xf6L\x00\x00\xd5\x98\xba\xc4n\xd4\xf3(eq]\x812\xc3\x8e\x88\x00\x00\x00\x00\x00\xff\xff\x00')

23:11:40 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00')
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/37, 0x25}], 0x1, 0x1f9)

23:11:40 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x600000000000000, [0x0, 0x0, 0x1b, 0x4900], [0xc2]})

23:11:40 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_oth', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:40 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58)
write$binfmt_elf64(r2, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000200)=[{&(0x7f00000004c0)='w', 0x1}], 0x1, 0x0)
splice(r1, 0x0, r4, 0x0, 0x2000000000a, 0x0)

23:11:43 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, 0x0)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:11:43 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

23:11:43 executing program 2:
r0 = socket$inet6(0xa, 0x80000000000003, 0x80000000000007)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='$']})

23:11:43 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_other,fo', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:43 executing program 4:

23:11:43 executing program 5:

[  497.233353] IPVS: ftp: loaded support on port[0] = 21
23:11:43 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_other,fo', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:43 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000140)=0x40000200, 0x1c2)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x80656, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bc070")

23:11:43 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e)

23:11:43 executing program 2:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000080))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
close(r1)

23:11:43 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_other,fo', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:43 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_other,fowne', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  498.194286] IPVS: ftp: loaded support on port[0] = 21
23:11:46 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_other,fowne', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:46 executing program 2:

23:11:46 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

23:11:46 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e61853167377c000001000000d4dcafb00b3f9046dbb77487e901040000000000407fffffffffea001b2300000503000018030000cc000000ac010000000000001004d1e090e1fe916dd282e0f34f8dfac0dc16d5c4d700001004000010040002d32379b87c5ade6e27a603551ae6541351c2f2d3c00f3f72e211777424c9814f1f852110e5d4a50b060000006b63012812d04b94d660aab341cfe8364422b8666715ba085b009dc7eac00000000000000000000071d76c93bd447799bb6d896a35318297101e9da2a550407d89fb956619d6d268589b8d9c1291029b723101773b823cc65f4eaf5114000000000000000000"], 0x1)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r2, 0x3c)

23:11:46 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, 0x0)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:11:46 executing program 4:

[  500.385148] IPVS: ftp: loaded support on port[0] = 21
23:11:46 executing program 2:

23:11:46 executing program 4:

23:11:46 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_other,fowne', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:46 executing program 2:

23:11:46 executing program 5:

23:11:47 executing program 4:

23:11:47 executing program 2:

23:11:49 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0))
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:11:49 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_other,fowner', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:49 executing program 5:

23:11:49 executing program 4:

23:11:49 executing program 2:

23:11:49 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

23:11:49 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_other,fowner', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

[  503.522070] IPVS: ftp: loaded support on port[0] = 21
23:11:49 executing program 5:

23:11:49 executing program 2:

23:11:49 executing program 4:

23:11:49 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_other,fowner', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:49 executing program 2:

23:11:52 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0))
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:11:52 executing program 5:

23:11:52 executing program 4:

23:11:52 executing program 2:

23:11:52 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(0x0, 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:52 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

[  506.622130] IPVS: ftp: loaded support on port[0] = 21
23:11:52 executing program 5:

23:11:52 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(0x0, 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:52 executing program 4:

23:11:52 executing program 2:

23:11:53 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(0x0, 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:53 executing program 5:

23:11:55 executing program 2:

23:11:55 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:55 executing program 4:

23:11:55 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0))
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:11:55 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

23:11:55 executing program 5:

[  509.801494] IPVS: ftp: loaded support on port[0] = 21
23:11:55 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000640)=""/184, 0xb8}], 0x1}}, {{&(0x7f0000001b80)=@isdn, 0x80, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, 0x0, 0x0)
getpeername$packet(0xffffffffffffff9c, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0)

23:11:55 executing program 5:
syz_execute_func(&(0x7f0000000140)="cd8075fcb0b06969ef69dc00d9c4017d50ee8adcd0d01192000880410fd1b0b5d90000797c2a0f0fcdc4e3a95fd965eae23c3b4d4d408064797f41dfdf400f01efe5e59d7d2f2f1c0a1a63460fc4c161fccddfde9f")
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_execute_func(&(0x7f0000000140)="cd80c20000b0b06969ef69dc00d9c4017d50ee8adcd0d01192000880410fd1b02db5d90000007cc4c4e3a95fd965ea262e410f0ff5bb408064797f41dfdf400e01efc4a1fd28d29d7d2f67450f483b1c0a1a63460fc4c161fc4d96040476789f")

23:11:56 executing program 2:
sched_setaffinity(0x0, 0x2, &(0x7f0000000240)=0x6)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
rt_sigtimedwait(&(0x7f0000000000), 0x0, 0x0, 0x8)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000010c0))
ptrace(0x10, r0)
ptrace$cont(0x21, r0, 0x0, 0x4)

23:11:56 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:56 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:56 executing program 4:

23:11:58 executing program 5:

23:11:58 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(0x0, &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:11:58 executing program 4:

23:11:58 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:58 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

23:11:58 executing program 2:

[  512.810042] IPVS: ftp: loaded support on port[0] = 21
23:11:58 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:58 executing program 2:

23:11:59 executing program 5:

23:11:59 executing program 4:

23:11:59 executing program 5:

23:11:59 executing program 2:

23:11:59 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(0x0, &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:11:59 executing program 5:

23:11:59 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:11:59 executing program 2:

23:12:00 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

23:12:00 executing program 4:

23:12:00 executing program 5:

23:12:00 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, 0x0, 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:12:00 executing program 2:

23:12:00 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(0x0, &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:12:00 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, 0x0, 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:12:00 executing program 5:

[  514.215799] IPVS: ftp: loaded support on port[0] = 21
23:12:00 executing program 4:

23:12:00 executing program 2:

23:12:00 executing program 5:

23:12:00 executing program 4:

23:12:01 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

23:12:01 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:12:01 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, 0x0, 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

23:12:01 executing program 5:

23:12:01 executing program 2:

23:12:01 executing program 4:

[  515.180776] IPVS: ftp: loaded support on port[0] = 21
23:12:01 executing program 4:

23:12:01 executing program 2:

23:12:01 executing program 5:

23:12:01 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, 0x0, 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x101000, 0x0)

23:12:01 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:12:01 executing program 4:

23:12:02 executing program 5:

23:12:02 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, 0x0, 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x101000, 0x0)

23:12:02 executing program 2:

23:12:02 executing program 4:

23:12:02 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

23:12:02 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:12:02 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, 0x0, 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x101000, 0x0)

23:12:02 executing program 4:

[  516.550423] IPVS: ftp: loaded support on port[0] = 21
23:12:02 executing program 5:

23:12:02 executing program 2:

23:12:02 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:12:02 executing program 4:

23:12:02 executing program 5:

23:12:03 executing program 2:

23:12:03 executing program 5:

23:12:03 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:12:03 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

23:12:03 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, 0x0, 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)

23:12:03 executing program 4:

23:12:03 executing program 2:

23:12:03 executing program 5:

23:12:03 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:12:04 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, 0x0, 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)

23:12:04 executing program 4:

23:12:04 executing program 5:

[  518.022209] IPVS: ftp: loaded support on port[0] = 21
23:12:04 executing program 2:

23:12:04 executing program 5:

23:12:04 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(0x0, 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:12:04 executing program 4:

23:12:04 executing program 2:

23:12:04 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$audion(0x0, 0x1, 0x0)
getuid()
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=',allow_other,fowner<', @ANYRESDEC])
mount(&(0x7f0000000040)=ANY=[@ANYBLOB=','], 0x0, 0x0, 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)

23:12:04 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"v\x19n{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
lseek(r1, 0x20400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x2000008f)

23:12:04 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
unshare(0x40000000)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

23:12:04 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(0x0, 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:12:05 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='\'cgroupvboxnet0/em0*eth0\x00')

23:12:05 executing program 4:
r0 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  519.075909] IPVS: ftp: loaded support on port[0] = 21
23:12:05 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000009400)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x10001, 0x4)
recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd601bfc97004d8800fe800000000000000000000000000000ff02000000000000000000000000000100004e20004d9078e29607149378d33e1db1c73936c77aa3f7fac33b042bd303236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"], 0x0)
shutdown(r0, 0x0)

23:12:05 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(0x0, 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:12:05 executing program 4:
r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x101, 0x1})

23:12:05 executing program 0:
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
prctl$PR_CAPBSET_DROP(0x18, 0x0)
clone(0x2102001ff5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000040)=ANY=[@ANYBLOB='[d::]:'], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)='\x00')

23:12:05 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
socket$bt_hidp(0x1f, 0x3, 0x6)
sendmmsg$alg(r1, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f0000000000)={&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0x20001000}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0)
write$binfmt_misc(r0, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x3c, 0x0, 0x4, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc011}, 0x20040000)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0)

23:12:05 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:12:05 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit(0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x7)

23:12:06 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="b700000000000100bfa30000000000005503030028feffff7a0af0fff8ffffff69a4f0ff00000000b7060000000000017d400300000000005506000001ed00001f040000000000002c64000000000000730a00fe00000000850000002e000000b7000000000000009500000000000000"], 0x0}, 0x48)

23:12:06 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lstat(0x0, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10)
mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000300)=""/75)
accept(r0, &(0x7f0000000280)=@nfc_llcp, &(0x7f0000000000)=0x80)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

23:12:06 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
unshare(0x40000000)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

[  520.158462] IPVS: ftp: loaded support on port[0] = 21
23:12:06 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfffffcbe)
ioctl$FS_IOC_SETVERSION(r0, 0x401c5820, &(0x7f00000001c0))
write$P9_RAUTH(r0, 0x0, 0x0)

23:12:06 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000000/0x3000)=nil], &(0x7f0000000bc0)=[0x1], 0x0, 0x0)

23:12:06 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
unshare(0x40000000)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

23:12:06 executing program 0:
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={<r0=>0x0, 0x7, 0x9}, &(0x7f0000000100)=0xc)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r0, 0x7}, 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
unshare(0x40000000)
fchmodat(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x9, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, 0x0)

[  520.674869] IPVS: ftp: loaded support on port[0] = 21
[  520.727014] IPVS: ftp: loaded support on port[0] = 21
23:12:06 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x2007fff)
sendfile(r0, r2, 0x0, 0x800000000024)

23:12:06 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.selinux\x00', 0x0, 0x0, 0x0)

23:12:07 executing program 2:
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000340)=ANY=[], 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={<r1=>0x0, 0x7, 0x9}, &(0x7f0000000100)=0xc)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r1, 0x7}, 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
unshare(0x40000000)
fchmodat(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000040)={0x3})

[  521.176867] IPVS: ftp: loaded support on port[0] = 21
[  521.241241] IPVS: ftp: loaded support on port[0] = 21
[  521.437854] IPVS: ftp: loaded support on port[0] = 21
23:12:08 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:12:08 executing program 4:
clone(0x3002001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x13)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$cont(0x20, r0, 0xffffffffffffffff, 0x8)

23:12:08 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

23:12:08 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x1e4}}], 0x1, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'sit0\x00', 0x1003})
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r2, &(0x7f00000000c0), 0x2000000000000148)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
inotify_init()

23:12:08 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='io.weight\x00', 0x2, 0x0)
write$cgroup_int(r1, 0x0, 0x0)

23:12:08 executing program 2:
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000340)=ANY=[], 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={<r1=>0x0, 0x7, 0x9}, &(0x7f0000000100)=0xc)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r1, 0x7}, 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
unshare(0x40000000)
fchmodat(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000040)={0x3})

[  523.004041] IPVS: ftp: loaded support on port[0] = 21
[  523.005284] ptrace attach of "/root/syz-executor.4"[17012] was attempted by "/root/syz-executor.4"[17013]
23:12:09 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

23:12:09 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x800004e23, @rand_addr=0x3}, 0x10)
sendto$inet(r0, 0x0, 0xfffffffffffffe85, 0x20000003, &(0x7f0000000040)={0x2, 0x1000004e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1400008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0xf)
r2 = memfd_create(&(0x7f0000000000)='Pev ', 0x0)
ftruncate(r2, 0x200739)
sendfile(r0, r2, 0x0, 0xa00004000000000)

23:12:09 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, 0x0, 0x3, 0x0, &(0x7f0000ffc000/0x1000)=nil})

23:12:09 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

23:12:09 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
unshare(0x40000000)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r0 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

23:12:09 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3010, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffff8d}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0)

[  523.714929] IPVS: ftp: loaded support on port[0] = 21
23:12:12 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:12:12 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='io.weight\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000000)=0x4000000ad, 0x12)

23:12:12 executing program 0:
clone(0x800000007fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
inotify_init1(0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
fchdir(r0)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = memfd_create(&(0x7f0000000140)='\r\xd6J\xf4sn}1\xd4@v\xf4\xads\x05\xca\xb1\xa0\x97\xc3o9+W\x850\xba\xae\x1a\xc9M\xafs\x14\xbb#\xab\xf8\xd9%\x14!\xf8\xb2\x89\x7fS$4\f\xe0_{bJ\xbfD\x8a\x00xp', 0x0)
write(r2, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)

23:12:12 executing program 5:
epoll_create(0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x80)
mkdir(0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, 0x0, 0xa22b10a7)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)

23:12:12 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
unshare(0x40000000)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r0 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

23:12:12 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)={0x0, @aes128, 0x1, "285b6fd2881830d9"})
close(r1)
socket$netlink(0x10, 0x3, 0x400000000000a)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r1, r2, 0x0, 0x8000ffffffff)

[  526.155484] IPVS: ftp: loaded support on port[0] = 21
23:12:12 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070")
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

23:12:12 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040))
write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r1, 0x3, 0x0, 0x10000408001)
write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)=ANY=[@ANYPTR64], 0x1)
fallocate(r1, 0x3, 0x0, 0x80000003)

23:12:12 executing program 2:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
recvmsg(r0, &(0x7f0000002600)={&(0x7f0000000080)=@alg, 0x80, &(0x7f0000002500)=[{0x0}, {0x0}], 0x2}, 0x12140)

23:12:12 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="2e0000002e008183ad5de0713c444d0008000000100003402e0000000000000037153e370000000060000000d1bd", 0x2e}], 0x1}, 0x0)

23:12:12 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
pipe2(&(0x7f0000000a40), 0x0)

23:12:13 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x4000)

23:12:15 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(0xffffffffffffffff, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:12:15 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
unshare(0x40000000)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r0 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

23:12:15 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='io.weight\x00', 0x2, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
write$FUSE_WRITE(r2, &(0x7f0000000200)={0x18}, 0x18)

23:12:15 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='io.weight\x00', 0x2, 0x0)
read(r1, 0x0, 0x0)

23:12:15 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="2e0000002e008183ad5de0713c444d0007000000100003402e0000000000000037153e370000000060000000d1bd", 0x2e}], 0x1}, 0x0)

23:12:15 executing program 4:

[  529.298447] IPVS: ftp: loaded support on port[0] = 21
23:12:15 executing program 4:

23:12:15 executing program 2:

23:12:15 executing program 5:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, 0xfffffffffffffffe)

23:12:15 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"v\x19n{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
lseek(r1, 0x20400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x2000008f)

23:12:15 executing program 2:
clone(0x800000007fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = inotify_init1(0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
fchdir(r1)
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = memfd_create(&(0x7f0000000140)='\r\xd6J\xf4sn}1\xd4@v\xf4\xads\x05\xca\xb1\xa0\x97\xc3o9+W\x850\xba\xae\x1a\xc9M\xafs\x14\xbb#\xab\xf8\xd9%\x14!\xf8\xb2\x89\x7fS$4\f\xe0_{bJ\xbfD\x8a\x00xp', 0x0)
write(r3, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
dup2(r2, r0)
mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)

23:12:15 executing program 4:

23:12:18 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(0xffffffffffffffff, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:12:18 executing program 5:

23:12:18 executing program 3:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
unshare(0x40000000)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r0 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

23:12:18 executing program 4:

23:12:18 executing program 2:

23:12:18 executing program 0:

[  532.436549] IPVS: ftp: loaded support on port[0] = 21
23:12:18 executing program 5:

23:12:18 executing program 2:

23:12:18 executing program 0:

23:12:18 executing program 4:

23:12:18 executing program 5:

23:12:18 executing program 3:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
unshare(0x40000000)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r0 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

[  532.974627] IPVS: ftp: loaded support on port[0] = 21
23:12:21 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(0xffffffffffffffff, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:12:21 executing program 5:

23:12:21 executing program 0:

23:12:21 executing program 2:

23:12:21 executing program 4:

23:12:21 executing program 3:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
unshare(0x40000000)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r0 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

23:12:21 executing program 0:

[  535.591103] IPVS: ftp: loaded support on port[0] = 21
23:12:21 executing program 4:

23:12:21 executing program 2:

23:12:21 executing program 5:

23:12:21 executing program 0:

23:12:22 executing program 5:

23:12:24 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, 0x0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:12:24 executing program 2:

23:12:24 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
unshare(0x40000000)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r0 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

23:12:24 executing program 4:

23:12:24 executing program 0:

23:12:24 executing program 5:

[  538.613310] IPVS: ftp: loaded support on port[0] = 21
23:12:24 executing program 2:

23:12:24 executing program 0:

23:12:24 executing program 4:

23:12:24 executing program 5:

23:12:24 executing program 0:

23:12:25 executing program 2:

23:12:27 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, 0x0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:12:27 executing program 5:

23:12:27 executing program 4:

23:12:27 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
unshare(0x40000000)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r0 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

23:12:27 executing program 2:

23:12:27 executing program 0:

[  541.715952] IPVS: ftp: loaded support on port[0] = 21
23:12:27 executing program 0:

23:12:27 executing program 4:

23:12:28 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip_mr_cache\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

23:12:28 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = dup2(r1, r0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000003c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'team_slave_0\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="56b4a5f58b00"}, 0x14)
sendmmsg$inet_sctp(r2, &(0x7f0000001980), 0x4924af2, 0x0)

23:12:28 executing program 4:
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0xe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip_mr_cache\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

23:12:28 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070")
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x98, r1, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcb}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100000000}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040004}, 0x20000050)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='.\xcd\x00\x96\x86\x89o\xf8\x8b/cgroup.fet/\xdeiz1\x00d\xea\xad\xcf\xd37\xc8\xcb6Q\xed\xdaH\x84\xdag`3\x15g\x86\xec\xe4p\x1fzP3\x8f\xfc\x93\xd8\x82\xc9\x17\xb2\xabn\xac\x00\xa4\xbf\xe3c#\xc4\xea\xdcK\v\x1e\x16\x1bIv\x18\n4\xca\x1b\x02\xeb\xebWR\xdb\xe0XW@\x04z\xeb`\xa6\xa9Q_\xd4\xb3\f(\xd4hy[\xb7\x87\\\xc4\xf9y\xacT\xc6I\xc4\xba(c\x1b\r\x8e\x14\x9d1', 0x1ff)

23:12:30 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, 0x0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:12:30 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)

23:12:30 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
unshare(0x40000000)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r0 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

23:12:30 executing program 0:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x6)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0)

23:12:30 executing program 4:
perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
read$rfkill(r0, &(0x7f0000000000), 0x8)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
fcntl$setpipe(r0, 0x407, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea)
splice(r0, 0x0, r3, 0x0, 0x2000000000a, 0x0)
mprotect(&(0x7f0000104000/0x3000)=nil, 0x3000, 0x0)

23:12:30 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00\xe7y\x9dH\x96\x1a\"\xaa\xbb\xb2\x8f_\xe1R\x90\xcb`\xfa\xe0]8s\xf0H\xe5\xe9\xc3\x98\x1f\xc2\x93Q\x89k\xc57\xe1\xd3M\xd4,=q\xb2\x92f\xc2)\x94\b\x00\x00\x00\x00\x00\x00\x00g%\x9e\x8fm!X\b\x8b\xf7_\x01\xe0\xabd_o\xa7m\x16\x8c\x00\xad{;\xfc=s\xcbq5\x97\x01e\x83\xae-\b:g8l\rv\x05\xa0m\xfc\xe0k`\xd3X\xba\xd2\xd3M\xaa@0\x1a {v)\x00\xf2k\x86PI!\xa7\xfb\xe5\r\xdcF\x11m\x8f\x02\x1b\x1a?\\\xbdBU\xe8\xab\xac\xe3GvY\xc7W\'\xcb\xd1\xd6\xad\xf2\x0e\xd8}*\xcb:\t\x17&G0\x9d\xad\x8f\x836F\xc3<\x1d\xd6\x0f\xac\x95\xb2\xbeZ\xc5\xdd\xb0\t\xdd)J\xe9\xa1\xfc\xde\xfd\t/e\x8b\xa0\r2\x043\x8a$+\x84\x10\xfc\xde2\xd55\xa4\x17\xd9\x82\aM4}~g\xc7/=y\xcb\xf5\x81\xdaT\xe9\x05\xd3v\xfb1\xf4\x1b}\xa7\xe23!\f\xd13\xaaI\xc2\xe0O\xae:\xe4', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@initdev, @in6=@loopback}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000580)=0xe8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000440)={&(0x7f0000000340), 0xc, 0x0}, 0x0)
fallocate(r0, 0x0, 0x0, 0x10fffa)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x0, 0x8})
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)

[  544.893252] IPVS: ftp: loaded support on port[0] = 21
23:12:31 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)

23:12:31 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
write$P9_RREMOVE(r1, &(0x7f0000000100)={0xffffffffffffff10}, 0xfffffc92)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x14103e, 0x0)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x4002011, r2, 0x0)

23:12:31 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070")
unshare(0x40000000)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

23:12:31 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001900010200000000000000001d01000018000400643fdd5b49fad3c44264b8700ab2000000"], 0x1}}, 0x0)

[  545.358326] IPVS: ftp: loaded support on port[0] = 21
23:12:31 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @rumble={0x0, 0x4}}, {0x0, 0x0, 0x9c62, {0x7fff}, {}, @ramp={0x8001, 0x0, {0x7fff}}}})

23:12:31 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000))

[  545.685422] Bluetooth: hci0: Frame reassembly failed (-84)
[  547.681899] Bluetooth: hci0: command 0x1003 tx timeout
[  547.687625] Bluetooth: hci0: sending frame failed (-49)
23:12:34 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(0x0)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:12:34 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070")
unshare(0x40000000)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

23:12:34 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0)
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c)
listen(r2, 0x0)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
accept4(r2, 0x0, 0x0, 0x0)

23:12:34 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)

23:12:34 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000140))

[  548.011169] IPVS: ftp: loaded support on port[0] = 21
23:12:34 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30)
read$FUSE(r0, &(0x7f00000030c0), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x2}, 0x50)

23:12:34 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
getsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x3)
sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x20000008, 0x0, 0x0)
getsockopt$inet6_dccp_int(r0, 0x21, 0x3, &(0x7f0000000000), &(0x7f0000000200)=0xfeee)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001140), 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x7fff)
sendfile(r1, r2, &(0x7f0000d83ff8)=0x1d, 0x8000fffffffe)

23:12:34 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10, 0x11}], 0x10}}], 0x1, 0x0)

23:12:34 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070")
unshare(0x40000000)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

[  548.488128] IPVS: ftp: loaded support on port[0] = 21
23:12:34 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x10031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="2c0271ca8b080aae3300bfa4def38003c21c104094", 0x15}], 0x1}, 0xc100)
sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002e00)="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", 0x2b7}], 0x1}, 0x8000)
sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)="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", 0x2d5}], 0x1}, 0x0)

23:12:34 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001e0001000000000000020000010000000c00014000000b85f50a75142c5f41053d651a5f087c077a7b71bc79591dd4ea57458cc0664b9cff00c987204685b0481315652e31f2700556e0b1d29dd5a4c9d313694879e949a1b53bfbd89203447c24141669871d8e4132930a6f6984b7504fdef9457298d56c0eab4891eaa994f9300e967816cce2e6fdbe95e71c83e2e31d71468f"], 0x1}}, 0x0)

[  549.761941] Bluetooth: hci0: command 0x1001 tx timeout
[  549.767468] Bluetooth: hci0: sending frame failed (-49)
[  551.841906] Bluetooth: hci0: command 0x1009 tx timeout
23:12:42 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x20051, r0, 0x0)
clone(0xa0000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

23:12:42 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0)

23:12:42 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
unshare(0x40000000)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

23:12:42 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @dev}, 0xc)
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc)

23:12:42 executing program 5:
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, 0x0)
ioctl$BLKPG(r0, 0x40140921, &(0x7f0000000000)={0x0, 0x0, 0x3d2, 0x0})

23:12:42 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(0x0)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

[  556.008513] IPVS: ftp: loaded support on port[0] = 21
23:12:42 executing program 5:
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0)
ioctl$BLKPG(r0, 0x80140912, 0x0)

23:12:42 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x1000000000004)
writev(r0, &(0x7f00000a8000)=[{&(0x7f00000002c0)="580000001400192300bb4b80040d8c56286932324ba7e680129643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff80003a5000004000000005e0000001d30221f1000010007008a96ff1300ec6b0f536e", 0x58}], 0x1)

[  556.687552] IPVS: ftp: loaded support on port[0] = 21
23:12:42 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0x10, 0x4, 0x13, 0x0, r1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000200), 0x0}, 0x20)

23:12:42 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
unshare(0x40000000)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

23:12:43 executing program 2:
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={r0})
ioctl$BLKPG(r0, 0x40140921, &(0x7f0000000000)={0x0, 0xbd, 0x3d2, 0x0})

23:12:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}]}, 0x30}}, 0x0)

23:12:43 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
unshare(0x40000000)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

[  557.162789] IPVS: ftp: loaded support on port[0] = 21
23:12:43 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x8000000000001})

23:12:43 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x20000008, 0x0, 0x0)
getsockopt$inet6_dccp_int(r0, 0x21, 0x3, &(0x7f0000000000), &(0x7f0000000200)=0xfeee)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001140), 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x7fff)
sendfile(r1, r2, &(0x7f0000d83ff8)=0x1d, 0x8000fffffffe)

23:12:43 executing program 2:
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

23:12:43 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)

23:12:45 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(0x0)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:12:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040))
unshare(0x40000000)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

23:12:45 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x5, 0x8, 0x8000, 0x2000008000000001, 0x1}, 0x2c5)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f00000008c0)={0x5, 0x70, 0x0, 0x0, 0x1, 0x1b11, 0x0, 0xe59, 0x200, 0xc, 0x0, 0x100000001, 0x3, 0x1, 0x8, 0x0, 0x2, 0x8001, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x9}, 0x8, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={<r3=>0xffffffffffffffff, r2, 0x0, 0x22f, &(0x7f0000000280)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\xfd\xfd\xff\xff\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ', <r4=>0xffffffffffffffff}, 0x30)
perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x1, 0x80000001, 0x3ff, 0x100000001, 0x0, 0x0, 0x104, 0xa, 0x6d, 0x6, 0x2, 0x7, 0x95, 0xfffffffffffff001, 0xda36, 0x701e, 0xfffffffffffffff7, 0x7ff, 0xc03c, 0x8, 0x4d, 0x7f, 0xfffffffffffffe00, 0x9, 0x1ff, 0x7c, 0x0, 0x1, 0x1, 0x2, 0x7, 0x9, 0x5, 0xa01c, 0x6659, 0x8, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x10001}, 0x2000, 0x2, 0x1, 0x6, 0x4, 0xc56, 0x3}, r3, 0x10, r1, 0x3)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
unlink(&(0x7f0000000640)='./file0\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000540)='em1\x00')
recvmsg(0xffffffffffffffff, 0x0, 0x0)
r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1)
socketpair(0x2, 0x20000000000001, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmsg(r6, &(0x7f0000000500)={&(0x7f00000005c0)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/196, 0xc4}, {&(0x7f00000007c0)=""/111, 0x6f}, {&(0x7f0000000a00)=""/167, 0xa7}, {&(0x7f0000000ac0)=""/169, 0xa9}], 0x4, &(0x7f0000000b80)=""/4096, 0x1000}, 0x10040)
ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x800)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r')
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=r4, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r7, 0x0, 0x32, 0x0, &(0x7f00000009c0)="cb6e01cfd5be30bc8a6887c7a8867ce788b7ac037e4ef57ce17bddfd2f9bcbb65338fc84c507d15f92f59a54000000003298", 0x0, 0x24a2}, 0x28)
recvmsg$kcm(r6, &(0x7f0000002280)={&(0x7f0000000840)=@nl=@proc, 0x80, &(0x7f0000002100)=[{&(0x7f0000001b80)=""/235, 0xeb}, {&(0x7f0000001c80)=""/142, 0x8e}, {&(0x7f0000000940)}, {&(0x7f0000001d40)=""/139, 0x8b}, {&(0x7f0000001e00)=""/210, 0xd2}, {&(0x7f0000001f00)=""/210, 0xd2}, {&(0x7f0000002000)=""/192, 0xc0}, {&(0x7f00000020c0)=""/9, 0x9}], 0x8, &(0x7f0000002180)=""/215, 0xd7}, 0x40012020)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8923, &(0x7f0000000680)='mime_typevboxnet0:system[vmnet1]*:bdev\x00')
bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x73fffb, 0x0, 0x820000, 0x0}, 0x2c)

23:12:45 executing program 4:
r0 = socket(0x200000000000011, 0x3, 0x0)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "fb8d10e148029d85e03ea9300c43fdf2934df3ae25e86ae1e08fd44d151fe303fed134f038fd6799e788675d1b1536505bbc401dc37c9ad2c95703ea6434b0"}, 0x80, 0x0}, 0x2}], 0x1, 0x0)

23:12:45 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
getsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000100), 0x0)
sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x20000008, 0x0, 0x0)
getsockopt$inet6_dccp_int(r0, 0x21, 0x3, &(0x7f0000000000), &(0x7f0000000200)=0xfeee)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
ioctl$TCSETAW(r1, 0x5407, &(0x7f00000001c0)={0x7, 0x6, 0x20, 0x1, 0x2, 0xfff, 0x799, 0x4, 0x25, 0x6})
ftruncate(r2, 0x7fff)
sendfile(r1, r2, &(0x7f0000d83ff8)=0x1d, 0x8000fffffffe)

23:12:45 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000005bc0)=ANY=[@ANYBLOB="6e617400000100000000000000000000e4dbb77487000000670100000000000000000000001b1600000503000018030000cc000000ac010000000000001004c1e090e195916dd282f2ceea5bc551cc3d95c4f1000010"], 0x1)

23:12:45 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="66b834010f00d82e0f18cde6000f01c8f08065059b8fe930028f00000000660fd6e3c4c2fd3496af9d661d0f20c035200000000f22c066ba4000b893000000ef", 0x40}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  559.133189] IPVS: ftp: loaded support on port[0] = 21
23:12:45 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$notify(r0, 0x402, 0xd)

23:12:45 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f0000000000)='#}\x00\x9a\x1b\xc2_R\xea\xd3\xddT\xd0\xec;\xa4\x9dV>\xa4\x11\xa4\xac\x9e\x1e\xac\xaaT\xd5\xd3\xf8<\xd7Yb\x04I\xdct,&\xe90\xa8\xaf\xff\xd3\xcd\xcd-\x90\'\xa2v\xbal\xa3l\"\xa0G\xebD\x1d\x8c\x8e\x15\x8d``\xb2\xdb\x9e\'\xef_\xde?i\xacl\x03\xaa\xdc(\x96\xbed\x9b\x1d\x95\x13\xbe\xe7\xb8\xa3\x13>\xdd}\x87\xc7Y\xf1\x92\xe3BIky\xe8\x85\xe9^\x1d\xb2\xd2Ycn\x9d\xafQ\xb1\x02\x99z\x81\xff\xc2\xdd)\xfe\'\xb8\"X@\xd6,\xb5\xa6\xa2\xe1:\xecG\x1d\xfe\x86\x85\xe7\xd4\xf6!C\xa3\xcf\xf3S\xeaA\xd7\x11\xc9O\x8e+\x94\x8c\x1f\xd6\x88\x97\xd0\xdd*\x90)\"\xda', 0x2)
ftruncate(r1, 0x40001)
sendfile(r0, r1, 0x0, 0x100000000002)
fcntl$addseals(r1, 0x409, 0x8)

23:12:45 executing program 2:
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={r0})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$BLKPG(r0, 0x40140921, &(0x7f0000000000)={0x0, 0x0, 0x3d2, 0x0})

23:12:45 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x20051, r0, 0x0)
clone(0xa0000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

23:12:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040))
unshare(0x40000000)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

[  559.877151] IPVS: ftp: loaded support on port[0] = 21
23:12:46 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:12:46 executing program 4:
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x800, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)

23:12:46 executing program 2:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x20001000008912, &(0x7f00000000c0)="0adc1f123c123f319bc070")
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14)
ioctl$int_in(r4, 0x5421, &(0x7f00000000c0)=0x6)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x900, 0x4)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r3, 0x0, 0x1000000010005, 0x0)

23:12:46 executing program 5:
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x400806e, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
sendto$inet6(r0, &(0x7f0000001440)="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", 0x566, 0xc001, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000240)="f11d9485945532b02c13b63ecca90bcd5e45aae6c27dcfb60d8f3b82d09721908ec5fd0cd4fc40b461afc79758bb2ebb7ba7e67fc49a3d4bb896b2", 0x3b, 0x10008000, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000040)="c5cbdeda579d85f4a014ee69", 0xc, 0x0, 0x0, 0x0)

23:12:46 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'lo\x00', 0x20005})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0}, 0x48)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000180)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ')

23:12:46 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040))
unshare(0x40000000)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

23:12:46 executing program 0:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x2, 0x0)
chdir(&(0x7f0000000540)='./file0\x00')
open(&(0x7f0000000180)='./file0\x00', 0x40, 0xffffffffffffffff)
execve(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)

[  560.391372] IPVS: ftp: loaded support on port[0] = 21
23:12:46 executing program 5:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0)

23:12:46 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

23:12:46 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)="2e0000001d008107e00f80ecdb4cb9d9056319041a000f00000000fb120001000e0fda1b40d819a9060015000000", 0x2e}], 0x1}, 0x0)

23:12:46 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12")
unshare(0x40000000)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

23:12:46 executing program 5:
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0)
ioctl$BLKPG(r0, 0x40140921, &(0x7f0000000000)={0x0, 0x0, 0x3d2, 0x0})

23:12:47 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x44f)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xaa0d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))

23:12:47 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
dup2(r1, r2)
tkill(r0, 0x16)

[  561.027297] IPVS: ftp: loaded support on port[0] = 21
23:12:47 executing program 2:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x80045300, &(0x7f0000000540)={0x77f, 0x0, 0x10000000000})
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=<r1=>0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40080, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x481)
ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, 0x0)
r5 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x4010b002)
sendmsg$alg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000640)="628671435790a82a4ddb5fbb0bdf62a709916f146370a6ecc13cee67a93d6a0f5226c536dde403337d95294394a86faaff37c03561727dd124418ea0057e50b69a58d9125237f582eade7b0f7f5293cc7ac2eedf8c33a20816dd6309bf52555e4bcc5d7ee4475e68799dcbde9a989f32e22b3b36e5f82fd8006f29abc6a72b019b85fd1fb9851693a92f9a71eade33b40a9fb0b5d93d895e1ae1", 0x9a}], 0x1, 0x0, 0x0, 0x10}, 0x4000010)
r6 = gettid()
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000940)={@in6={{0xa, 0x4e24, 0x3, @loopback, 0x7d67}}, 0x0, 0x7fff, 0x0, "22f9a17221a4641011c994198d52ffbd4a6f308d444647d3d14f5289fc50d50c472099acd357f09264975c192f9f3094107677ebf1f9c2a47b8b8254cfe4afa177e749910cbb1fa3ba71b75b4dd0b33d"}, 0xd8)
getgid()
timer_create(0x7, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid=r1}, &(0x7f0000000080)=<r7=>0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000))
tkill(r6, 0x1004000000016)
fgetxattr(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="b5811c9f9fa5e74862fb3d031e07ce1be82fe1e93dbebd2ad0c57850bd49f3732c687eacff300527c3eea4f1946a582b2b12d70cf2adff76c20ed4487692f55392f9c3a059f73a089b2fab7937ed7ebed374efd07879e8d316960877393e40a664326c9cf42b66d14537e75e588632561b42587c5db308fd8a3e4a0152c46fa2542401db480f23b6aec3902b53f548c7ed540fb8ab69cf2823bc08fbf17d023200a1bfe4d8dad51b7f659a8c944421e13dbcbb3d40f2b926a0cb88ddc0bdfea638565870c982c4f50cea917edce22bc76295cef57201a5d799932d866260829bc071a2ec0662295e604c2f62adc5c5e3433e04c9d12dabfeb6a706b5c3113739290749dbed399203c2403e44e3f93892f1fde1a1d44d033edb84621d05b7985f730f936cf9f049105a3d4539fd1ddaeb4f6bff7f00000000000022dca8d7f17d32700140ba2b682306a1a30bb3dab7ac41d3e41400000009403c0f354128786b6e0a40b44d24b736fcaae3d880ebac288e7a6a1edc3ca58cdb9f593166a34975b372755269084091406ca08b2ca681091223c754a0d5f35e8af31c0ec5cbbd9d060900dfd90b65a2e127562bfd4d30ebc291ca00aad40dea17722e4cbadb49d1ca5483c4c328d19e7d51ce42d76f94098da30400fea20f3abe15b8031aa4c79e19fd6a79a2e20b505e2c61594f251b01a6fe096504b35f8e140000000000000000100000000000000000b98d580607c82205ce0ccf7c1baa8eee368c89419a191c3bf1174e9609c1d9f32771fbf9f4c3c700000000eb8256000000000000005288a65d1b64d0149543c9dd391bcbf9923e4621738651b6fc0e521d93caa8339e587c9931e67cb6724fc2aaa9762bc1bc9d0e925120c31d163e00000000000000cbe9edb13fbceb0900e9e1bc95b43cd42f95382dda2f70f8"], 0x0, 0x0)
close(r4)
r8 = dup2(r4, r2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x3, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x3, 0x2}, {0x716, 0x7, 0x8, 0x8, 0x0, 0x800, 0x2, 0x4, 0x1, 0x0, 0x0, 0x6b74, 0x8000}, {0x1, 0x0, 0x1406, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x81, 0x8245, 0x0, 0x2}]})
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff)
timer_delete(r7)
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000140)={0x0, 0x1, 0x7, &(0x7f0000000100)=0x10001})
open(&(0x7f0000000200)='./file0\x00', 0x2a0000, 0x100)
openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x240102, 0x0)

23:12:47 executing program 4:
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKPG(r0, 0x40140921, &(0x7f0000000000)={0x0, 0x0, 0x3d2, 0x0})

23:12:47 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
r1 = socket$key(0xf, 0x3, 0x2)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffc, 0x5}}, 0xe8)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x0)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020700090200000000000000a9da0000"], 0x10}}, 0x0)

23:12:47 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x2000000005452, &(0x7f00000000c0)=0x3f)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00), 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x99)
fcntl$setown(r1, 0x8, r0)
unlink(&(0x7f0000000180)='./file0\x00')
fcntl$setsig(r1, 0xa, 0x0)
dup2(r1, r2)
tkill(r0, 0x16)

[  561.588104] ==================================================================
[  561.595807] BUG: KMSAN: uninit-value in gue_err+0x514/0xfa0
[  561.601737] CPU: 1 PID: 17573 Comm: syz-executor.5 Not tainted 5.0.0+ #17
[  561.608920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  561.618299] Call Trace:
[  561.621090]  <IRQ>
[  561.623376]  dump_stack+0x173/0x1d0
[  561.627139]  kmsan_report+0x131/0x2a0
[  561.631112]  __msan_warning+0x7a/0xf0
[  561.635067]  gue_err+0x514/0xfa0
[  561.638669]  ? fou_build_header+0x690/0x690
[  561.643321]  __udp4_lib_err+0x12e6/0x1d40
[  561.647551]  udp_err+0x74/0x90
[  561.650785]  ? __udp4_lib_err+0x1d40/0x1d40
[  561.655184]  icmp_unreach+0xb65/0x1070
[  561.659245]  ? icmp_discard+0x30/0x30
[  561.663245]  icmp_rcv+0x11a1/0x1950
[  561.666932]  ? local_bh_enable+0x40/0x40
[  561.671081]  ? local_bh_enable+0x40/0x40
[  561.675189]  ip_protocol_deliver_rcu+0x584/0xbb0
[  561.680122]  ip_local_deliver+0x624/0x7b0
[  561.684427]  ? ip_local_deliver+0x7b0/0x7b0
[  561.688882]  ? ip_protocol_deliver_rcu+0xbb0/0xbb0
[  561.694026]  ip_rcv+0x6bd/0x740
[  561.697544]  ? ip_rcv_core+0x11d0/0x11d0
[  561.701840]  process_backlog+0x756/0x10e0
[  561.706051]  ? lapic_next_event+0x6f/0xa0
[  561.710250]  ? ip_local_deliver_finish+0x320/0x320
[  561.715510]  ? rps_trigger_softirq+0x2e0/0x2e0
[  561.720134]  net_rx_action+0x78b/0x1a60
[  561.724649]  ? net_tx_action+0xca0/0xca0
[  561.728831]  __do_softirq+0x53f/0x93a
[  561.732967]  do_softirq_own_stack+0x49/0x80
[  561.737711]  </IRQ>
[  561.740180]  __local_bh_enable_ip+0x16f/0x1a0
[  561.744950]  local_bh_enable+0x36/0x40
[  561.748959]  ip_finish_output2+0x1627/0x1820
[  561.753608]  ip_finish_output+0xd2b/0xfd0
[  561.758030]  ip_output+0x53f/0x610
[  561.761629]  ? ip_mc_finish_output+0x3b0/0x3b0
[  561.766253]  ? ip_finish_output+0xfd0/0xfd0
[  561.770710]  ip_send_skb+0x179/0x360
[  561.774572]  udp_send_skb+0xf25/0x18b0
[  561.778529]  udp_sendmsg+0x3aa4/0x40f0
[  561.782447]  ? ip_copy_metadata+0x1010/0x1010
[  561.787182]  ? kmsan_get_shadow_origin_ptr+0x73/0x490
[  561.792506]  udpv6_sendmsg+0x13c1/0x4500
[  561.796705]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  561.802314]  ? aa_sk_perm+0x605/0x950
[  561.806356]  ? aa_sock_msg_perm+0x16e/0x320
[  561.810912]  ? kmsan_get_shadow_origin_ptr+0x73/0x490
[  561.816163]  ? __udp6_lib_rcv+0x3e80/0x3e80
[  561.820622]  inet_sendmsg+0x54a/0x720
[  561.824473]  ? kmsan_get_shadow_origin_ptr+0x73/0x490
[  561.829804]  ___sys_sendmsg+0xdb9/0x11b0
[  561.834169]  ? inet_getname+0x490/0x490
[  561.838369]  ? kmsan_get_shadow_origin_ptr+0x73/0x490
[  561.843869]  ? __msan_metadata_ptr_for_load_1+0x10/0x20
[  561.849500]  ? __fget_light+0x6e1/0x750
[  561.853637]  ? kmsan_get_shadow_origin_ptr+0x73/0x490
[  561.859102]  __sys_sendmmsg+0x580/0xad0
[  561.863503]  ? __msan_metadata_ptr_for_store_4+0x13/0x20
[  561.869095]  ? prepare_exit_to_usermode+0x114/0x420
[  561.874152]  ? kmsan_get_shadow_origin_ptr+0x73/0x490
[  561.879596]  ? syscall_return_slowpath+0x50/0x650
[  561.884945]  __se_sys_sendmmsg+0xbd/0xe0
[  561.889217]  __x64_sys_sendmmsg+0x56/0x70
[  561.893498]  do_syscall_64+0xbc/0xf0
[  561.897342]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[  561.902785] RIP: 0033:0x458209
[  561.906100] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  561.925052] RSP: 002b:00007fa5b91d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  561.933008] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000458209
[  561.940576] RDX: 00000000000005c3 RSI: 0000000020000240 RDI: 0000000000000005
[  561.948008] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  561.955365] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa5b91d16d4
[  561.962880] R13: 00000000004c513e R14: 00000000004d8ec0 R15: 00000000ffffffff
[  561.970676] 
[  561.972331] Uninit was created at:
[  561.976029]  kmsan_internal_poison_shadow+0x92/0x150
[  561.978614] IPVS: ftp: loaded support on port[0] = 21
[  561.981376]  kmsan_kmalloc+0xa6/0x130
[  561.981393]  kmsan_slab_alloc+0xe/0x10
[  561.981414]  __kmalloc_node_track_caller+0xe9e/0xff0
[  561.981446]  __alloc_skb+0x309/0xa20
[  562.003890]  alloc_skb_with_frags+0x186/0xa60
[  562.008514]  sock_alloc_send_pskb+0xafd/0x10a0
[  562.013433]  sock_alloc_send_skb+0xca/0xe0
[  562.017707]  __ip_append_data+0x34cd/0x5000
[  562.022305]  ip_append_data+0x324/0x480
[  562.026444]  icmp_push_reply+0x23d/0x7e0
[  562.030539]  __icmp_send+0x2ea3/0x30f0
[  562.034490]  __udp4_lib_rcv+0x36d7/0x4b80
[  562.038942]  udp_rcv+0x5c/0x70
[  562.042204]  ip_protocol_deliver_rcu+0x584/0xbb0
[  562.047079]  ip_local_deliver+0x624/0x7b0
[  562.051515]  ip_rcv+0x6bd/0x740
[  562.054909]  process_backlog+0x756/0x10e0
[  562.059324]  net_rx_action+0x78b/0x1a60
[  562.063769]  __do_softirq+0x53f/0x93a
[  562.067769] ==================================================================
[  562.075630] Disabling lock debugging due to kernel taint
[  562.081106] Kernel panic - not syncing: panic_on_warn set ...
[  562.087120] CPU: 1 PID: 17573 Comm: syz-executor.5 Tainted: G    B             5.0.0+ #17
[  562.095759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  562.105284] Call Trace:
[  562.107905]  <IRQ>
[  562.110304]  dump_stack+0x173/0x1d0
[  562.114033]  panic+0x3d1/0xb01
[  562.117665]  kmsan_report+0x29a/0x2a0
[  562.124664]  __msan_warning+0x7a/0xf0
[  562.132133]  gue_err+0x514/0xfa0
[  562.135586]  ? fou_build_header+0x690/0x690
[  562.140139]  __udp4_lib_err+0x12e6/0x1d40
[  562.144420]  udp_err+0x74/0x90
[  562.147829]  ? __udp4_lib_err+0x1d40/0x1d40
[  562.152304]  icmp_unreach+0xb65/0x1070
[  562.156377]  ? icmp_discard+0x30/0x30
[  562.160621]  icmp_rcv+0x11a1/0x1950
[  562.164338]  ? local_bh_enable+0x40/0x40
[  562.168615]  ? local_bh_enable+0x40/0x40
[  562.173156]  ip_protocol_deliver_rcu+0x584/0xbb0
[  562.178004]  ip_local_deliver+0x624/0x7b0
[  562.182214]  ? ip_local_deliver+0x7b0/0x7b0
[  562.186574]  ? ip_protocol_deliver_rcu+0xbb0/0xbb0
[  562.191631]  ip_rcv+0x6bd/0x740
[  562.195142]  ? ip_rcv_core+0x11d0/0x11d0
[  562.199430]  process_backlog+0x756/0x10e0
[  562.203614]  ? lapic_next_event+0x6f/0xa0
[  562.208073]  ? ip_local_deliver_finish+0x320/0x320
[  562.213099]  ? rps_trigger_softirq+0x2e0/0x2e0
[  562.218099]  net_rx_action+0x78b/0x1a60
[  562.222418]  ? net_tx_action+0xca0/0xca0
[  562.228069]  __do_softirq+0x53f/0x93a
[  562.232403]  do_softirq_own_stack+0x49/0x80
[  562.236840]  </IRQ>
[  562.239141]  __local_bh_enable_ip+0x16f/0x1a0
[  562.243927]  local_bh_enable+0x36/0x40
[  562.248066]  ip_finish_output2+0x1627/0x1820
[  562.252810]  ip_finish_output+0xd2b/0xfd0
[  562.257231]  ip_output+0x53f/0x610
[  562.261098]  ? ip_mc_finish_output+0x3b0/0x3b0
[  562.265813]  ? ip_finish_output+0xfd0/0xfd0
[  562.270261]  ip_send_skb+0x179/0x360
[  562.274336]  udp_send_skb+0xf25/0x18b0
[  562.278297]  udp_sendmsg+0x3aa4/0x40f0
[  562.282408]  ? ip_copy_metadata+0x1010/0x1010
[  562.287227]  ? kmsan_get_shadow_origin_ptr+0x73/0x490
[  562.292637]  udpv6_sendmsg+0x13c1/0x4500
[  562.296891]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  562.302504]  ? aa_sk_perm+0x605/0x950
[  562.306838]  ? aa_sock_msg_perm+0x16e/0x320
[  562.311566]  ? kmsan_get_shadow_origin_ptr+0x73/0x490
[  562.316891]  ? __udp6_lib_rcv+0x3e80/0x3e80
[  562.321426]  inet_sendmsg+0x54a/0x720
[  562.325396]  ? kmsan_get_shadow_origin_ptr+0x73/0x490
[  562.330881]  ___sys_sendmsg+0xdb9/0x11b0
[  562.335216]  ? inet_getname+0x490/0x490
[  562.339262]  ? kmsan_get_shadow_origin_ptr+0x73/0x490
[  562.344500]  ? __msan_metadata_ptr_for_load_1+0x10/0x20
[  562.350336]  ? __fget_light+0x6e1/0x750
[  562.354363]  ? kmsan_get_shadow_origin_ptr+0x73/0x490
[  562.360005]  __sys_sendmmsg+0x580/0xad0
[  562.364234]  ? __msan_metadata_ptr_for_store_4+0x13/0x20
[  562.369723]  ? prepare_exit_to_usermode+0x114/0x420
[  562.374878]  ? kmsan_get_shadow_origin_ptr+0x73/0x490
[  562.380282]  ? syscall_return_slowpath+0x50/0x650
[  562.385373]  __se_sys_sendmmsg+0xbd/0xe0
23:12:47 executing program 0:

23:12:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12")
unshare(0x40000000)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

23:12:47 executing program 4:

23:12:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12")
unshare(0x40000000)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x3)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

[  562.389716]  __x64_sys_sendmmsg+0x56/0x70
[  562.393942]  do_syscall_64+0xbc/0xf0
[  562.398030]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[  562.403343] RIP: 0033:0x458209
[  562.406568] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  562.425507] RSP: 002b:00007fa5b91d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  562.433376] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000458209
[  562.441070] RDX: 00000000000005c3 RSI: 0000000020000240 RDI: 0000000000000005
[  562.448598] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  562.456118] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa5b91d16d4
[  562.463804] R13: 00000000004c513e R14: 00000000004d8ec0 R15: 00000000ffffffff
[  562.472852] Kernel Offset: disabled
[  562.476959] Rebooting in 86400 seconds..