3000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:01:54 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:01:54 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f00000008c0)={0x1, "45a69a087de9fafbb13f6c443a27b48590e8c3065af0486dbda48261cb324a97", 0x1, 0x800, 0x1, 0x7b6, 0x11, 0x3}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x3, 0x1f, 0x8}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:01:54 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:01:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2(&(0x7f00000004c0)={0xffffffffffffffff}, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000540)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@local, 0x81, r3}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr(r4, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) fdatasync(r4) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000140)={0x400, 0xf13, 0x6}) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000500)='/dev/usbmon#\x00', 0x5a, 0x8000042001) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000240)=0x7) ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f0000000140)=0x6) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f00000008c0)={0x1, "45a69a087de9fafbb13f6c443a27b48590e8c3065af0486dbda48261cb324a97", 0x1, 0x800, 0x1, 0x7b6, 0x11, 0x3}) capset(&(0x7f00000001c0), &(0x7f0000000200)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x3, 0x1f, 0x8}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) 00:01:54 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, 0x0) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:01:55 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:01:55 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000067b278ccf0b7caa23e3800000082000040000000000200000000000000cff597a56556d42688aa2b9cf6604ec2c5f112b145d42a57d14db302fae5cea607c12607b6b96343975e94eba6e1863a9f25ddb1d7c44dc4818fb3f439ebb4f0a1a17c30408542c1703229d6c9237a8ac784470000733738714d6b524507528cb835318bb5641eda598b00ef62f9b5f11baa5483344b259aeee37bd00ba877dedc448532266dafe40030a2de03c9307b3579e3f4c4b7616b233b899080368198b0115ef74d9d1380824edd59b2789924fa0fa06bd0f8bc176dc36fd5bb91a264b2110dd293890154ad73fe4275d65d7c17d6d554949abe0d31ab8f17975a09af4b1e945cdeb8af18b1341bcc96ecf0514ba89d7a0c6e0f156a5b73f0adb39673d79447cac5ef4581f14d1800c975dca76e98f1ef"]) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f00000008c0)={0x1, "45a69a087de9fafbb13f6c443a27b48590e8c3065af0486dbda48261cb324a97", 0x1, 0x800, 0x1, 0x7b6, 0x11, 0x3}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x3, 0x1f, 0x8}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:01:55 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x1, &(0x7f0000000280)=[0xee01]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) [ 1520.946199][T24851] relay: one or more items not logged [item size (56) > sub-buffer size (9)] 00:01:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2(&(0x7f00000004c0)={0xffffffffffffffff}, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000540)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@local, 0x81, r3}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr(r4, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) fdatasync(r4) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000140)={0x400, 0xf13, 0x6}) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000500)='/dev/usbmon#\x00', 0x5a, 0x8000042001) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000240)=0x7) ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f0000000140)=0x6) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f00000008c0)={0x1, "45a69a087de9fafbb13f6c443a27b48590e8c3065af0486dbda48261cb324a97", 0x1, 0x800, 0x1, 0x7b6, 0x11, 0x3}) capset(&(0x7f00000001c0), &(0x7f0000000200)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x3, 0x1f, 0x8}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) 00:01:55 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:01:55 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, 0x0) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:01:55 executing program 1: r0 = memfd_create(0x0, 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:01:55 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f00000008c0)={0x1, "45a69a087de9fafbb13f6c443a27b48590e8c3065af0486dbda48261cb324a97", 0x1, 0x800, 0x1, 0x7b6, 0x11, 0x3}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x3, 0x1f, 0x8}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:01:55 executing program 1: r0 = memfd_create(0x0, 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:01:55 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x1, &(0x7f0000000280)=[0xee01]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:01:55 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f00000008c0)={0x1, "45a69a087de9fafbb13f6c443a27b48590e8c3065af0486dbda48261cb324a97", 0x1, 0x800, 0x1, 0x7b6, 0x11, 0x3}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x3, 0x1f, 0x8}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:01:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2(&(0x7f00000004c0)={0xffffffffffffffff}, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000540)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@local, 0x81, r3}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr(r4, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) fdatasync(r4) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000140)={0x400, 0xf13, 0x6}) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000500)='/dev/usbmon#\x00', 0x5a, 0x8000042001) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000240)=0x7) ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f0000000140)=0x6) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000067b278ccf0b7caa23e3800000082000040000000000200000000000000cff597a56556d42688aa2b9cf6604ec2c5f112b145d42a57d14db302fae5cea607c12607b6b96343975e94eba6e1863a9f25ddb1d7c44dc4818fb3f439ebb4f0a1a17c30408542c1703229d6c9237a8ac784470000733738714d6b524507528cb835318bb5641eda598b00ef62f9b5f11baa5483344b259aeee37bd00ba877dedc448532266dafe40030a2de03c9307b3579e3f4c4b7616b233b899080368198b0115ef74d9d1380824edd59b2789924fa0fa06bd0f8bc176dc36fd5bb91a264b2110dd293890154ad73fe4275d65d7c17d6d554949abe0d31ab8f17975a09af4b1e945cdeb8af18b1341bcc96ecf0514ba89d7a0c6e0f156a5b73f0adb39673d79447cac5ef4581f14d1800c975dca76e98f1ef"]) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f00000008c0)={0x1, "45a69a087de9fafbb13f6c443a27b48590e8c3065af0486dbda48261cb324a97", 0x1, 0x800, 0x1, 0x7b6, 0x11, 0x3}) capset(&(0x7f00000001c0), &(0x7f0000000200)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x3, 0x1f, 0x8}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) 00:01:56 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:01:56 executing program 1: r0 = memfd_create(0x0, 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:01:56 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, 0x0) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:01:56 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f00000008c0)={0x1, "45a69a087de9fafbb13f6c443a27b48590e8c3065af0486dbda48261cb324a97", 0x1, 0x800, 0x1, 0x7b6, 0x11, 0x3}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x3, 0x1f, 0x8}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:01:56 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 1522.011324][T24896] relay: one or more items not logged [item size (56) > sub-buffer size (9)] 00:01:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2(&(0x7f00000004c0)={0xffffffffffffffff}, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000540)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@local, 0x81, r3}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr(r4, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) fdatasync(r4) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000140)={0x400, 0xf13, 0x6}) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000500)='/dev/usbmon#\x00', 0x5a, 0x8000042001) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000240)=0x7) ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f0000000140)=0x6) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f00000008c0)={0x1, "45a69a087de9fafbb13f6c443a27b48590e8c3065af0486dbda48261cb324a97", 0x1, 0x800, 0x1, 0x7b6, 0x11, 0x3}) capset(&(0x7f00000001c0), &(0x7f0000000200)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x3, 0x1f, 0x8}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) 00:01:56 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x1, &(0x7f0000000280)=[0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:01:56 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, 0x0) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:01:56 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000067b278ccf0b7caa23e3800000082000040000000000200000000000000cff597a56556d42688aa2b9cf6604ec2c5f112b145d42a57d14db302fae5cea607c12607b6b96343975e94eba6e1863a9f25ddb1d7c44dc4818fb3f439ebb4f0a1a17c30408542c1703229d6c9237a8ac784470000733738714d6b524507528cb835318bb5641eda598b00ef62f9b5f11baa5483344b259aeee37bd00ba877dedc448532266dafe40030a2de03c9307b3579e3f4c4b7616b233b899080368198b0115ef74d9d1380824edd59b2789924fa0fa06bd0f8bc176dc36fd5bb91a264b2110dd293890154ad73fe4275d65d7c17d6d554949abe0d31ab8f17975a09af4b1e945cdeb8af18b1341bcc96ecf0514ba89d7a0c6e0f156a5b73f0adb39673d79447cac5ef4581f14d1800c975dca76e98f1ef"]) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f00000008c0)={0x1, "45a69a087de9fafbb13f6c443a27b48590e8c3065af0486dbda48261cb324a97", 0x1, 0x800, 0x1, 0x7b6, 0x11, 0x3}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x3, 0x1f, 0x8}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:01:56 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:01:56 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:01:56 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x0, 0x4}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f00000008c0)={0x1, "45a69a087de9fafbb13f6c443a27b48590e8c3065af0486dbda48261cb324a97", 0x1, 0x800, 0x1, 0x7b6, 0x11, 0x3}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x3, 0x1f, 0x8}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:01:56 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x1, &(0x7f0000000280)=[0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:01:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2(&(0x7f00000004c0)={0xffffffffffffffff}, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000540)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@local, 0x81, r3}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr(r4, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) fdatasync(r4) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000140)={0x400, 0xf13, 0x6}) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000500)='/dev/usbmon#\x00', 0x5a, 0x8000042001) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000240)=0x7) ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f0000000140)=0x6) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f00000008c0)={0x1, "45a69a087de9fafbb13f6c443a27b48590e8c3065af0486dbda48261cb324a97", 0x1, 0x800, 0x1, 0x7b6, 0x11, 0x3}) capset(&(0x7f00000001c0), &(0x7f0000000200)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x3, 0x1f, 0x8}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) 00:01:57 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:01:57 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x0, 0x4}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f00000008c0)={0x1, "45a69a087de9fafbb13f6c443a27b48590e8c3065af0486dbda48261cb324a97", 0x1, 0x800, 0x1, 0x7b6, 0x11, 0x3}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x3, 0x1f, 0x8}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:01:57 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:01:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2(&(0x7f00000004c0)={0xffffffffffffffff}, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000540)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@local, 0x81, r3}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr(r4, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) fdatasync(r4) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000140)={0x400, 0xf13, 0x6}) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000500)='/dev/usbmon#\x00', 0x5a, 0x8000042001) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000240)=0x7) ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f0000000140)=0x6) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f00000008c0)={0x1, "45a69a087de9fafbb13f6c443a27b48590e8c3065af0486dbda48261cb324a97", 0x1, 0x800, 0x1, 0x7b6, 0x11, 0x3}) capset(&(0x7f00000001c0), &(0x7f0000000200)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x3, 0x1f, 0x8}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) 00:01:57 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:01:57 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:01:57 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x0, 0x4}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f00000008c0)={0x1, "45a69a087de9fafbb13f6c443a27b48590e8c3065af0486dbda48261cb324a97", 0x1, 0x800, 0x1, 0x7b6, 0x11, 0x3}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x3, 0x1f, 0x8}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) [ 1523.225502][T24956] relay: one or more items not logged [item size (56) > sub-buffer size (9)] 00:01:57 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x1, &(0x7f0000000280)=[0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:01:57 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:01:57 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000067b278ccf0b7caa23e3800000082000040000000000200000000000000cff597a56556d42688aa2b9cf6604ec2c5f112b145d42a57d14db302fae5cea607c12607b6b96343975e94eba6e1863a9f25ddb1d7c44dc4818fb3f439ebb4f0a1a17c30408542c1703229d6c9237a8ac784470000733738714d6b524507528cb835318bb5641eda598b00ef62f9b5f11baa5483344b259aeee37bd00ba877dedc448532266dafe40030a2de03c9307b3579e3f4c4b7616b233b899080368198b0115ef74d9d1380824edd59b2789924fa0fa06bd0f8bc176dc36fd5bb91a264b2110dd293890154ad73fe4275d65d7c17d6d554949abe0d31ab8f17975a09af4b1e945cdeb8af18b1341bcc96ecf0514ba89d7a0c6e0f156a5b73f0adb39673d79447cac5ef4581f14d1800c975dca76e98f1ef"]) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f00000008c0)={0x1, "45a69a087de9fafbb13f6c443a27b48590e8c3065af0486dbda48261cb324a97", 0x1, 0x800, 0x1, 0x7b6, 0x11, 0x3}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x3, 0x1f, 0x8}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:01:57 executing program 5: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x1, &(0x7f0000000280)=[0xee01]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:01:57 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:01:57 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:01:57 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000067b278ccf0b7caa23e3800000082000040000000000200000000000000cff597a56556d42688aa2b9cf6604ec2c5f112b145d42a57d14db302fae5cea607c12607b6b96343975e94eba6e1863a9f25ddb1d7c44dc4818fb3f439ebb4f0a1a17c30408542c1703229d6c9237a8ac784470000733738714d6b524507528cb835318bb5641eda598b00ef62f9b5f11baa5483344b259aeee37bd00ba877dedc448532266dafe40030a2de03c9307b3579e3f4c4b7616b233b899080368198b0115ef74d9d1380824edd59b2789924fa0fa06bd0f8bc176dc36fd5bb91a264b2110dd293890154ad73fe4275d65d7c17d6d554949abe0d31ab8f17975a09af4b1e945cdeb8af18b1341bcc96ecf0514ba89d7a0c6e0f156a5b73f0adb39673d79447cac5ef4581f14d1800c975dca76e98f1ef"]) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f00000008c0)={0x1, "45a69a087de9fafbb13f6c443a27b48590e8c3065af0486dbda48261cb324a97", 0x1, 0x800, 0x1, 0x7b6, 0x11, 0x3}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x3, 0x1f, 0x8}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:01:58 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:01:58 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:01:58 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f00000008c0)={0x1, "45a69a087de9fafbb13f6c443a27b48590e8c3065af0486dbda48261cb324a97", 0x1, 0x800, 0x1, 0x7b6, 0x11, 0x3}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x3, 0x1f, 0x8}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:01:58 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:01:58 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:01:58 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040), 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:01:58 executing program 5: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x1, &(0x7f0000000280)=[0xee01]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:01:58 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f00000008c0)={0x1, "45a69a087de9fafbb13f6c443a27b48590e8c3065af0486dbda48261cb324a97", 0x1, 0x800, 0x1, 0x7b6, 0x11, 0x3}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x3, 0x1f, 0x8}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:01:58 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:01:58 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040), 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:01:58 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:01:58 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x1, &(0x7f0000000280)=[0xee01]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:01:58 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f00000008c0)={0x1, "45a69a087de9fafbb13f6c443a27b48590e8c3065af0486dbda48261cb324a97", 0x1, 0x800, 0x1, 0x7b6, 0x11, 0x3}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x3, 0x1f, 0x8}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:01:59 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040), 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:01:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2(&(0x7f00000004c0)={0xffffffffffffffff}, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000540)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@local, 0x81, r3}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr(r4, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) fdatasync(r4) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000140)={0x400, 0xf13, 0x6}) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000500)='/dev/usbmon#\x00', 0x5a, 0x8000042001) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000240)=0x7) ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f0000000140)=0x6) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f00000008c0)={0x1, "45a69a087de9fafbb13f6c443a27b48590e8c3065af0486dbda48261cb324a97", 0x1, 0x800, 0x1, 0x7b6, 0x11, 0x3}) capset(&(0x7f00000001c0), &(0x7f0000000200)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x3, 0x1f, 0x8}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(r4, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) 00:01:59 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x3, 0x1f, 0x8}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:01:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2(&(0x7f00000004c0)={0xffffffffffffffff}, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000540)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@local, 0x81, r3}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr(r4, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) fdatasync(r4) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000140)={0x400, 0xf13, 0x6}) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000500)='/dev/usbmon#\x00', 0x5a, 0x8000042001) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000240)=0x7) ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f0000000140)=0x6) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f00000008c0)={0x1, "45a69a087de9fafbb13f6c443a27b48590e8c3065af0486dbda48261cb324a97", 0x1, 0x800, 0x1, 0x7b6, 0x11, 0x3}) capset(&(0x7f00000001c0), &(0x7f0000000200)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x3, 0x1f, 0x8}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(r4, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) 00:01:59 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:01:59 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x1, &(0x7f0000000280)=[0xee01]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:01:59 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:01:59 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x3, 0x1f, 0x8}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:01:59 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:01:59 executing program 5 (fault-call:4 fault-nth:0): socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:01:59 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x0, &(0x7f0000000000)) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:01:59 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x3, 0x1f, 0x8}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:01:59 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:01:59 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:01:59 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:01:59 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x1, &(0x7f0000000280)=[0xee01]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:00 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:00 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:00 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x0, &(0x7f0000000000)) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:00 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x2, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:00 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:00 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:00 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x1, &(0x7f0000000280)=[0xee01]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:00 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x1, &(0x7f0000000280)=[0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:00 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x4, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:00 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:00 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f, 0x8}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:00 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x0, &(0x7f0000000000)) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:01 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x5, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:01 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f, 0x8}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:01 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:01 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x1, &(0x7f0000000280)=[0xee01]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:01 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x1, &(0x7f0000000280)=[0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:01 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x6, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:01 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x0, 0x8}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:01 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[0x0]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:01 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x7, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:01 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:01 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x0, 0x8}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:01 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x1, &(0x7f0000000280)=[0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:01 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x1, &(0x7f0000000280)=[0xee01]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:01 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x8, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:01 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:02 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x0, 0x8}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:02 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[0x0]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:02 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x9, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:02 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:02 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:02 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x1, &(0x7f0000000280)=[0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:02 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:02 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0xa, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:02 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:02 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:02 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[0x0]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:02 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0xb, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:02 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[], 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:03 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:03 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:03 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x1, &(0x7f0000000280)=[0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:03 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0xc, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:03 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[], 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:03 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:03 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(0x0, &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:03 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0xd, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:03 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[], 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:03 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:03 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x1, &(0x7f0000000280)=[0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:03 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:03 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0xe, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:03 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:04 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(0x0, &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:04 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:04 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0xf, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:04 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:04 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:04 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:04 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x0, &(0x7f0000000000)) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:04 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 00:02:04 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(0x0, &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:04 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x10, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:04 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:04 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 00:02:05 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:05 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x0, &(0x7f0000000000)) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:05 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 00:02:05 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x11, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:05 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="34000000000005"], 0x7) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:05 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', 0x0) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:05 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x12, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:05 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="34000000000005"], 0x7) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:05 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x0, &(0x7f0000000000)) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:05 executing program 0: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0xb, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:05 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:05 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x13, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:05 executing program 0: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x12, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:06 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="34000000000005"], 0x7) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:06 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', 0x0) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:06 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[0x0]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:06 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x14, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:06 executing program 0: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x8, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:06 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000"], 0xb) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:06 executing program 0: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x6, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:06 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', 0x0) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:06 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x15, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:06 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', 0x0) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:06 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[0x0]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:06 executing program 0 (fault-call:16 fault-nth:0): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:06 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000"], 0xb) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:06 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x16, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:07 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:07 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', 0x0) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:07 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x17, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:07 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000"], 0xb) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:07 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4) pipe(0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', r2}) r3 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x6, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f00000003c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_matches\x00') ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000000)={0x3, 0xfff, 0x0, 0x100000001}) r5 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x9, 0x400) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r5, 0x894c, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000400)) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e9809f186c6ffff0002740c"], &(0x7f0000000440)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000480)={r7, 0x800}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x80000000, 0x0, 0xab0d, 0xffffffff}, &(0x7f00000002c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000300)={0x2, 0x4, 0x202, 0x1, 0x7f, 0xc7, 0x3, 0x1, r8}, &(0x7f0000000340)=0x20) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 00:02:07 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:07 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[0x0]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:07 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x18, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:07 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="34000000000005000000000000"], 0xd) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:07 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000240)=""/205) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r2}) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x80000000, 0x5, 0x9, 0x354}, {0x6, 0x4, 0x4, 0x40}]}, 0x10) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r5 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, 0x0) ioctl$KDGKBTYPE(r5, 0x4b33, &(0x7f00000001c0)) ioctl$sock_SIOCGSKNS(r5, 0x894c, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) eventfd(0x8966) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000340)={'nlmon0\x00', 0x2f65, 0x9}) 00:02:07 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', 0x0) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:08 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x19, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:08 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="34000000000005000000000000"], 0xd) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:08 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x4) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 00:02:08 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:08 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(0x0, &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:08 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x1b, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:08 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="34000000000005000000000000"], 0xd) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:08 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:08 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:08 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x1c, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:08 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:08 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) recvmmsg(r0, &(0x7f0000002680)=[{{&(0x7f0000000140)=@ipx, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/137, 0x89}, {&(0x7f0000000000)=""/45, 0x2d}], 0x2}, 0xee}, {{&(0x7f00000002c0)=@isdn, 0x80, &(0x7f0000002580)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/64, 0x40}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/251, 0xfb}, {&(0x7f0000002480)=""/226, 0xe2}], 0x5, &(0x7f0000002600)=""/94, 0x5e}}], 0x2, 0x40000140, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002700)=0xfffffffffffffff9, 0x4) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000002740)=0x1, &(0x7f0000002780)=0x4) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 00:02:08 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:09 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(0x0, &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:09 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x1d, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:09 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r2 = syz_open_dev$usbmon(0x0, 0xc5e0b0b, 0x43fffc) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0xd) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) setsockopt(r2, 0xff, 0xfffffffffffffff9, &(0x7f0000000140)="1ee986057df453476ca75ce46803bbcc7becf93b2851d8cb4bb5af3af4b30257fa03853b1a7b034b38a82ceeb98a3aaf2c4c26f5cff68ff1f0e82b700e3cc69948437960c39eea26ef074e3081656b5d1c8b76b7dd0df1ed5ce709d8e73227fc465aab1d814fcf595676a55e8b867b474b0f237f2a", 0x75) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000000)={0x83e, 0x5, 0x1}) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000280)=0x1) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f00000001c0)) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x100, 0x0) 00:02:09 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:09 executing program 5: r0 = add_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000140)="bab01446ab715790892f0dc1fcad3de35adf82", 0x13, r0) socket$inet6(0xa, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:09 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000000)=0x2) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:09 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x2, &(0x7f0000000340)=[0xee00, 0xee01]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:09 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:09 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(0x0, &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:09 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) r2 = request_key(&(0x7f0000000140)='syzkaller\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='\x00', 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r2) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8200}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r3, 0x8, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'ib', 0x3a, 'rose0\x00'}}}, ["", "", "", ""]}, 0x2c}}, 0x80) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) 00:02:10 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000140)={{0x0, 0xa720, 0xa7c, 0x9}, 'syz0\x00', 0x3d}) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:10 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:10 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:10 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', 0x0) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:10 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x2, &(0x7f0000000340)=[0xee00, 0xee01]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:10 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) socket$can_raw(0x1d, 0x3, 0x1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0xffffffffffffffc0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:10 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000140)=""/240) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000440), 0x4) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) rt_sigaction(0x17, &(0x7f00000002c0)={&(0x7f0000000240)="c401215963002e2e0fd210c40289dc9e9e000000c42165e4baab000000440f8000000000400fa9c4a191ddf3f6a20008000065450f10df8081ed5236b48f", {0x115}, 0x80000003, &(0x7f0000000280)="d9fcc4a33d6d9f4c000000e9660ff23cccc4a17d58ab22938817f2f0805b998944dfec42ed8fa850cf02008f0978d141f5c46260f20c2f"}, &(0x7f00000003c0)={&(0x7f0000000300)="36f2f041ff08c401795a780741dc50fa65f30f1a4f2a2e64d8f9f00fc08700000000c40115dafc40df2ac4e1355609dbe2", {}, 0x0, &(0x7f0000000340)="f2400f5de6460ffb6e6f8f6808a649fa93c4c185fb59650faf88ead0a381f22ed2ae0d00000046dc350e000000c461e57614d4f021241fc403955db72630b62f00"}, 0x8, &(0x7f0000000400)) 00:02:10 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000340)={0xff, &(0x7f0000000200)="164b50c7ae9f756dcdffb61ca1bc3344210569fe9a8554a7998f4f29d05aa34a688ed88575a4c3fdab0bd0986cd408a0e7e2acfb1860a2feec70fa2866cdc895d1e2b5a3ad922a766b23d234a94e9937d31ffc38575dd26fa8f096e123d4c9eab92ab71c3965c4d74d85eea397164d690042c8d328067c7bbd6b60e2b1b936a3565e2cc5"}) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) ioctl$CAPI_INSTALLED(r0, 0x80024322) getgroups(0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x4, 0x5}) getgroups(0xffffffffffffff8f, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x40c, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000000)=ANY=[@ANYRESOCT=r2], 0x1, 0x2) 00:02:10 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x2, &(0x7f0000000340)=[0xee00, 0xee01]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:10 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:11 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="a69819645ec0473060668ca315ed05640a727e7f7204", 0x16}, {&(0x7f0000000140)="305842480cebb69037d0fc7f7ebecb69", 0x10}, {&(0x7f0000000180)="7ba8ed3f428a2786d0564eb0d6d22b9e8fcce8a73ea48b61638cf044b194494987c3bbf267cd39855192dfab115a112671357862d22609bc77ba1460cfd1842c9c92edded71bb60f6fbd7644a3775407a953d29481584385cf9759f352f90a80559dc14eddb54d7ce707f31d1ba5de03c5e2581a3096a25c5f9ec0cd0a5dc76351da85afe666dbe122c851f53bd2ce62aab951e57497bb3d91f4cbaf63146e7fe09452a83e99ad9fd960fb85", 0xac}, {&(0x7f0000000240)="87bb104e9ab0017c73f4103bcf91d9a93fcae92c0ec5b43b4767b4aa22683517365757f723d2ab51c0c425ceee78e3f6fadee79ac1d7e21406de6e54d4b09fefce38695a7c4897cd9817fde266dedfb9b468834de4b1fc74b7436d98373b96e2ba9158d847a64d5f9f10a495d1f3ff25c742b1b0f1cd651a08f5e1fa823efa4b7dda5f3cd6db8ad0dbb8e20c2ed41b216854dd86bf737c876391c3e8383f087d38860d13e70635db6bc4035afd21ce68a15388878c19071b6fd5075b1f12e29187485c2ae6904cf7b5dcc364fd7e", 0xce}, {&(0x7f0000000340)="b15d562dec97ec980d89cf594c1cd44210dbbbac8c2d5cf88f386d0ebccf411f171b0cc98a76d9a81e07b5e4c74dfdc679745d5cf3c1b74ffc03e98c62e46982c7e528fc6df951b4e5", 0x49}, {&(0x7f00000003c0)="7869f388bf6705cf022a9fa2c8f593ef0e9c0aa59d442236d5ed6334683412d8cca5ccc9a7a2eaf7a6bbce50fbfa86ff5b8cb980de471e2dff2b0d0c311a27f1ec8d6d56608e7d18f86cdf5bb742de4223b8c1e18c69f6b72877b29dc923a771ba64118e6017c75789e6ca78c83d125be8cb9d616be0c34748590943df83f41c5e2d5e6a74", 0xfeb1}, {&(0x7f0000000480)="f6447806e14f8e52c7f6b5f8e1744c56722dbcabc113", 0x65}], 0x7}, 0x4010) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(r0, 0x0, 0x0, 0x315, 0x0) setsockopt$sock_void(r1, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:11 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', 0x0) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:11 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x2, &(0x7f0000000340)=[0xee00, 0xee01]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:11 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) geteuid() set_mempolicy(0x3, &(0x7f0000000040)=0x7, 0x0) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x800, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0x4) getgroups(0x0, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@host}) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:11 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000000)={0xcf55}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000140)=0x2) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) 00:02:11 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x2, &(0x7f0000000340)=[0xee00, 0xee01]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:11 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r1, 0x0, 0x1, &(0x7f0000000200)='\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x80000001, 0x1, 0x100, 0xffffffffffffffff, 0x0, 0x9, 0x1, 0x4, 0xc49, 0x188f, 0x4, 0xffffffffffffff81, 0x81, 0x4, 0xcb4, 0x10000, 0x3, 0x3000000000, 0x9, 0x5000000000000, 0x8, 0x1000, 0x5, 0x9, 0x6, 0xfff, 0x1, 0x1, 0x4, 0x10000, 0x38, 0x6, 0x3, 0xffffffffffffffff, 0x3f, 0xffffffff00000001, 0x0, 0x10001, 0x6, @perf_bp={&(0x7f0000000140), 0x2}, 0x8000, 0x1, 0x80000001, 0x9, 0x9, 0x0, 0xe1}, r3, 0x7, r1, 0x1) getgroups(0xffffffffffffffcf, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:11 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:11 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', 0x0) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:11 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000140)={0xa20000, 0x8b0, 0x6, [], &(0x7f0000000000)={0x98090f, 0x9, [], @value64=0x2}}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:12 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x2, &(0x7f0000000340)=[0xee00, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:12 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x2, &(0x7f0000000340)=[0xee00, 0xee01]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:12 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000000)=@ipx, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)=""/34, 0x22}, {&(0x7f0000000180)=""/79, 0x4f}, {&(0x7f0000000200)=""/66, 0x42}, {&(0x7f0000000500)=""/183, 0xb7}, {&(0x7f0000000280)=""/2, 0x2}, {&(0x7f00000005c0)=""/181, 0xb5}], 0x6, &(0x7f0000000700)=""/74, 0x4a}, 0x40010020) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:12 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x8000, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000200)=""/186) ioctl$KDGKBSENT(r0, 0x4b48, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 00:02:12 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:12 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:12 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:12 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x2, &(0x7f0000000340)=[0xee00, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:13 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x83}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000180)={r2, 0x43, "9179f9ef8404ea32a4db59e5273b5a28a7a809d07fe8e5c0c8a3ae01cf11039ee0eeb12b73fa76c9953c3dd1af9b970deb6f5916af8d21528709f61a62bbed9f78678a"}, &(0x7f0000000200)=0x4b) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:13 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x2, &(0x7f0000000340)=[0xee00, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:13 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) getpeername$packet(r1, &(0x7f0000001740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001780)=0x14) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000017c0)={@rand_addr="e4a7458e8fe721b2e3806cdca2d99000", r3}, 0x14) keyctl$revoke(0x3, r2) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) sched_setparam(r4, &(0x7f0000000040)=0x8) socket$inet_udp(0x2, 0x2, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:13 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x101000, 0x0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000140)={0x2, "28a79f03fc17d06cb8b30da73949fbde18abc3e9019d21ba553eea48a358ab9a", 0x4, 0x400, 0x6, 0x0, 0x4}) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 00:02:13 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:13 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x2, &(0x7f0000000340)=[0xee00, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:13 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) r3 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r3) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) getgroups(0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000140)=""/228, &(0x7f0000000240)=0xe4) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000280)) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:13 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:13 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(r1, 0x1, 0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:13 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x2, &(0x7f0000000340)=[0xee00, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:13 executing program 5: socket$inet6(0xa, 0x0, 0x40000000000) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x38e40000000, 0x101000) write$P9_ROPEN(r0, &(0x7f0000000140)={0x18, 0x71, 0x1, {{0x84, 0x0, 0x1}, 0x80}}, 0x18) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:14 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x2, &(0x7f0000000340)=[0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:14 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x0, 0x2, 0x2}) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x5) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(r1, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 00:02:14 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:14 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) ioctl$KDADDIO(r0, 0x4b34, 0x4) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0xffffffffffffff19, 0x0) getgroups(0x0, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000040)) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) readahead(r2, 0x1, 0x20) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000140)={0x746, 0x120000000, 0x41, 0x4, 0x1, 0x4666a8ab}) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:14 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x80}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240)={r4, 0xad}, &(0x7f0000000280)=0x8) ioctl$sock_SIOCGSKNS(r3, 0x894c, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000180)={0x980000, 0xfff, 0x1, [], &(0x7f0000000140)={0x9a0914, 0x5, [], @value64=0x9}}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) 00:02:14 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x2, &(0x7f0000000340)=[0xee00, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:14 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[], 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:14 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:14 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) ioprio_get$uid(0x3, r3) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 00:02:14 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x2, &(0x7f0000000340)=[0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:14 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) socket$isdn(0x22, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:14 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x2, &(0x7f0000000340)=[0xee00, 0xee01]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:15 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) ioctl$RTC_VL_CLR(r1, 0x7014) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:15 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[], 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:15 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x2, &(0x7f0000000340)=[0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:15 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0xfffffffffffffffd) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000140)=0xffffffff80000001) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:15 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r0, 0x0, 0x9, &(0x7f0000000000)='/dev/vcs\x00', 0xffffffffffffffff}, 0x30) sched_getscheduler(r2) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:15 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) chroot(&(0x7f0000000000)='./file0\x00') r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', r3}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 00:02:15 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x2, &(0x7f0000000340)=[0xee00, 0xee01]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:15 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x2, &(0x7f0000000340)=[0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:15 executing program 5: socket$inet6(0xa, 0x0, 0x800000000) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2004800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0x130, r2, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1000}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffffffffffe}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x20}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}]}, 0x130}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) getgroups(0xfffffe46, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'icmp\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000040)=0xfffffffffffffff7) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:15 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x2, &(0x7f0000000340)=[0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:15 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x70, 0x3, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x40, 0x210a, 0x2, 0x2, 0x9, 0x80000001, 0x8, 0x70b4, 0x6, 0x800, 0x54ae, 0x6cde, 0x7, 0x5, 0x3, 0x6, 0xff, 0x8, 0x10000, 0x40, 0xfff, 0x800, 0x0, 0x5, 0xfe3, 0x0, 0x60d, 0x5, 0x0, 0x10000, 0x2, 0x0, 0xffff, 0x5, @perf_config_ext={0x9, 0x1}, 0x400, 0x9, 0x2, 0x7, 0x6, 0x9, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 00:02:16 executing program 5: umount2(&(0x7f0000000140)='./file0\x00', 0x4) r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x80000001, 0x200000) write$FUSE_GETXATTR(r0, &(0x7f00000001c0)={0x18, 0x0, 0x2, {0x9}}, 0x18) socket$inet6(0xa, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb729, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000500)) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) keyctl$link(0x8, r2, r2) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) getgroups(0xfffffffffffffd4f, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) clock_gettime(0x3, &(0x7f0000000200)) ioctl$UI_DEV_DESTROY(r0, 0x5502) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000700)=ANY=[], 0x0, 0x0) 00:02:16 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[], 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:16 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x2, &(0x7f0000000340)=[0xee00, 0xee01]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:16 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r0 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r2 = getegid() ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r2]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r0, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:16 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, 0x0) io_setup(0x7fff, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 00:02:16 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x2, &(0x7f0000000340)=[0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:16 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000940)='/dev/audio#\x00', 0x9, 0x2) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000980)) socket$inet6(0xa, 0x0, 0x100000001) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/vcs\x00', 0x200000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) mount(&(0x7f0000000840)=@sg0='/dev/sg0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='nfs\x00', 0x40, &(0x7f0000000900)='syz') sendmsg(r1, &(0x7f0000000280)={&(0x7f0000000000)=@isdn={0x22, 0x0, 0x5b69, 0x3, 0x4}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000140)="fd47bb8a4b7df730c0f8cf3ec891e1d5319d3b0ce71500dbbbe79543b1d6ab1e4b8e352314a328f91d338eb43631734aa23ca4dad6179ff84c47e1ed50fff376f09f78b6caa8041cb50d84828beefebe6c4cf3620c36f821b46b654d02d779007528aad90f5e5de417db252df648c7e65b56ce519ad4bb43260615acf57b954c80226c581e8134c20b28041b351440b5f41a3234642286a62252e6c8090f3a1b1ed961d6383d5a6d690707d2989e924f2b0c1417c9fd8a0abaa3845aef9d809e59ec4ec764c2bba4ac2f560c10b4868e2a3660a17f0e048b700270b22077593ebab50c9c478ec295caba3ff7", 0xec}, {&(0x7f0000000500)="8aa2eca8c90845b97c479fe5e35f996d7c322b9147652276052974a2c639696ae6be35cae93f112db2048eec2607967c54999ad6f84532e8571e2400aad3560f954b5fc81599448b3aff8df13432cff894e0d45d179e99000458cd3009cc07268cb9d233605dedc2c91890eff9bb149594e8c3d5491a81137d3351d06dbd8dc4efe187c2b4355df378a4e0b847200638f43b4a157897cf3f62e1c56c9ad77a6412f8dacd2c66ed7790c8a09a79c01a6cad76119f904114a71f61beefd60c114c938f14be761a0e07771bc7f4b686573bd897f844", 0xd4}, {&(0x7f0000000240)="48eceb35d24c8c03", 0x8}, {&(0x7f0000000700)="c6b4b30f6a1337a2ffc22e16757eab00d32c386397aca1bf3bc7ccf119a6e9f94bd9d694b7cc4daebb41d650cd5d8094ea5c8953986dbf2363728011f8d221812004fedc9555eb8b8f5f9c4e9388ee4b2038d8fba0ca43885ffacdc38c31f19a0254bbd138c4f056c8941aab021ee9fa96e1768fbd432c66167678d5dee14121286badb78d23a4d66f2d33ce4ef324d3755c7ede551d82c1e8ceb78a9deac63124d0bc5e1b5dce65c995824368ab0f7e17aad7575e5711ac33", 0xb9}, {&(0x7f0000000340)="9451da31e025eb9037c78baac2b2bc99caf155b1719198d56b092c9e4c232668bfd9d8fa6973acc63a355c8bc70cf1ae8512c1bc3aeecdd478f31e5241f5ebfe4d3d972e6549de0b4b4b6ef201e1c7c72250e02b261fd235442c1f5fa71af743572b73c63207905ae93ecff4a604d0dc2c34c5c35b221213ee", 0x79}, {&(0x7f0000000600)="b58dda75e31d888da9022586dda32763a8bd621d92962c0ed0e769c1983a011ae29b6f50d421b224acc1b8e6ff2c3b45f8121a451ccaeca7a69e9b4994cd8fab95bf4bd2808dc0d6a360e9bc48398bcc4bfad612", 0x54}], 0x6, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], 0x1458}, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x7fff}, &(0x7f0000001cc0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001d00)={r3, @in6={{0xa, 0x4e21, 0x7, @mcast2, 0x80000001}}, 0x0, 0x7fffffff, 0xe9c, 0xc39, 0x2}, &(0x7f0000001dc0)=0x98) 00:02:17 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x20000, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x6, 0x1) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 00:02:17 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r0 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r2 = getegid() ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r2]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r0, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:17 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) accept4$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, &(0x7f0000000200)=0x10, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x1ea2c3541fe1e67, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0xfefd560185f368ac, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x401, 0x0, 0xffffffffffff0000, 0x1a, 0x0, 0x0, 0x0, 0xc, 0x1000, 0x7fffffff, 0x2, 0x3, 0x6, 0x9, 0x4, 0xfffffffffffff001, 0x2, 0x2, 0x80, 0x80, 0x7c9, 0x5, 0xd0000000000, 0x80000001, 0x85, 0x80, 0xffffffffffff756a, 0x1000, 0x0, 0x200, 0xffffffff00000001, 0x7, 0x657b, 0x4, 0x6, 0x5, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x8100, 0x742b2e58, 0x9, 0x7, 0x5, 0x533f, 0x37}, r2, 0xa, r0, 0x1) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:17 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x2, &(0x7f0000000340)=[0xee00, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:17 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:17 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) dup3(r0, r2, 0x80000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000240)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f00000014c0)=[{&(0x7f0000000180)="9f056c888905bcfc87a60ebc077fa4eeae9de2b6a0837f5fd286ba9a9bb3715627d91829370e573adbb48aaca1d5898309605d2c323e0c8cf523be12944067769fef7a2861ef037ba5110591a958e6180852fbf8c50da16ea0e3e8f22065e39b65901db3e92a4c0d98ce1f7754889a2ca88f793c7f757d65feedb1be7359eb3b3a44a74a76e41ccf904aec46cf08ca8042acb0e99fe848e6601060a257806425a6c6d21cccced8914b82a55022a9268deb906e6a", 0xb4, 0x7f}, {&(0x7f0000000240), 0x0, 0x6}, {&(0x7f0000000280)="3a6a66f2d0346243444e4bcd64db5442021213c59fa71412d2ebef2b53816af1b109eda4b7124f2713ba4147d92fa739c62ebcc4e13a3a6862702939e8dbd028ee6e61be6a97c8ddd5f4b17f58b6cf09f22b672673d036247be17fb948b270488c486e725908022910defc268c93f134d8a581268320b6c5b324412dad3c8bec52fe61ab514f6de266a86981346e0190755cf6afb0df1035bdd5109c04416041134cfd33c2bb56b4682fc11dff6bf344f929adefdbe750c27fade740b231d2b5c83ab470919209c4e454d068a2", 0xcd, 0x200}, {&(0x7f0000000380)="1289541381d11f2287f0b40faca24a7f7a16e612c27fd5c14bd47f3467ed8eec013fabbd2c9588bae343396e72b5d1", 0x2f}, {&(0x7f00000003c0)="a081445e2548bd9f09b6609cdc968fe05ffd100b9178d31377eb2cf6cb63e47faf655dbd9e3810289dcebeb14759addf49e2b558dd5d6067ec712fdfc9d9cfeafeea46979c3c3dd63d8420c58ada5f625fd1b8e78d7b356e509287c5f775537a75", 0x61}, {&(0x7f0000000440)="85295bd9ecc5f8170c07301d5e8ed83fd86e47fce3b52dd09402c96fa5d0a65efad08f0b66485c0886a0f78b9632587e56be9b17b562c3bf3ae7f801c493accfb97d56f167d985e8f717952a52516488a46593f1980831f1", 0x58, 0x800}, {&(0x7f00000004c0)="4fa49e054bcb6f571d39244e12f1a84d51c0bce13b2c89231a1b4dfd567e4d8532729b7cc9ad270ff37535ffcb4100bcad6455c845e9d52401f763b9b7d371a282b18acfdcc98fa548cbba4242174eeaf5fc2fa4a717d28c0fe7b0f3d95e3424d78d83762f888a458182298c76ca5bab431fe15b6de69870b84d8ebf5324e56f424d965d8007ea2b3bb78101022e0e0ba0c86513d5a8c43db414bbf9a041d51565a559b0e6a0a6fbdfe0d16324aac26ad4506e942d0cd146b441f64c1b53ba7a12d6a96c0cee15ac652ab8de068f10f6c3ae650017c7b5be56aae9b6fd58cc4e8ce317f9341b0b72aa308549330505d8bca767d06400127ce94b6dcfd477e7a95b2a4616d936de2e2bfcb003558018f901310b466eccffde59aeaf8045c2a1885e867d92f2d730cb845c2e99fb894109dbe6daca3de7ac9302386e5eacbb1ce70c70e302b0869c07f7b6bf9d6d286403ac4696dfa0446ca068a8da30467f637dfd7e5142257937f514ff9bbfa07ca9b49fed739538ae5e4c9055015ef3645848ac82ca9e88026f5354fc86fc3108f5d886b83d23b2e2a76b6f99ddc9bfa238c46b3ca5fca3b507c14ebfa533cdb4b8c1415b70bd95654f0c589d7e0a744d4890298598c8420d56b4fc0c1e54ad823f2ba9f29f833cf6ecfff2fcc6f41cdccd95178839405f7a2786773d3764ec6ca95fd651da8d4caf90fa9305668b548c8b2f3395932cc97b0d19ad06a9fca8134f55f0580efc43aacae0f79ba181aab47ae8890d9753a276529fd5e544e1d9c3186023763cdf56b11218c48521c145ca42be5fcd4eb45026dfc3282d8bbfc23560827bfe08eb34a126ac65fcaa946318bdb3a84b4be1aa0f9c89da8cf6ed21efcdb43db9608c6eaf9d521061fdf13eee01db263a6a3d4260be52c1c654cd9ff42006ac024b0f885d27704bb7b53ed0a3ab788a118719ec4188f03629dc20e00d8c2dc19ae04d13764217a9ffb37f9202d8904ec5d2a04620abd18f8229f5d5cff88bb00ae105afda7e0e018acb717892f282793f50208a262228b773fec9232ae76d5d7c9b0ee924b8db9b3337d8a5c1810e042f02c12df3aa70da65698b3616f75f7fa22ac0399ac2c15aa353c54f638e612c9ac51bea5956300baf7aa711bbaa3d97ef0daf1b5835a849be9c423aa612a5433b6f71fa6123bd4849cf55c74ba3fe65c69eb3b562a2c80f95fc5f36aadebbacc215e22112cf51a81600ff147b12bee5b491b9aea9edf5378a0d3bafc3772b3bbb4c52649f7a22ae3ffaf87a7ff7ddc20105a725eff3c18b2f240188bcdb2d768f05fb9524651f270b54236634a758be20f1275e58e2f0981059229f438a89ac12dd06c64b6b561644be53fb3bb6787ec25b0a4ea56c3b2690e01d592d18a50e7aa869081e2ed20b8887fd7a6e6a793ab7630202329191c1953dbd6b5bef53aa02783fc4f1e5069b4067048d5e82c36974ed97277d00030e596fddd87fa720e5186b6cce904fbecd78f700478f8e3754cc1e0111d759492cd2a39684df50c1c6d02f6d2943deade6812388aee305e8f71ec8bc208b5cb7c3afd523e1537ad694f8f3672ec27b4fcfb992a5738500ce14babe588cecf3c6ed4998abb38f649bcb7d0734300049c3db7b6ce7fec8239aa2779aa20476b83ea8d00140c3bd3d57aa11b655ce04b31bee16efe736e83e562c7f7a399cbcd0cb1cd19fb83b23e84fa309029c37fae2bd7d8efe7b116df7c8430c9e4cb5649d7cb71436fc42fc17ddb2e8009e6a0df72e027b5d80117a33c4a8598a30c72f8f7989c0c757a026e6f58bc2d150448b23c8ba9eb51dcaf889b1ee8a508cb506088e054ebff90665eed1883b1433b7d24f8f85384e44add10a572ac61d1a464c9f514999ea70933a110877a4eda82733ff10bd2a9bc6c16b4dae3e62df1891e11e79e01d59c94a2ff10917f9dff6b0cbfc361c2c3a0b39d8b3fa79beb92d02f083d6f3227ee10801e72c68d9d5a8b2e31cff7567f0a9665ecdfc8ad92c238c66a9938277bda68d106e66d611e89504283401887725c98b66bca21e49c46bb871ccc2b1eb76259214a4ea1941619c4c6b0e78e11cd1b4344de2cd0335c3b04625f019478acaad3e88993283905f03ec2f864cbbb20cb17c3adad9deb890268d5ece825d277de63ceda8aa53ad5520552c4eb684dde32d8c477ea4157dea2fa8267bbbd914c05561558235c3cb9016d7215c1fd3c4a2bb35bdde6c94e44663d8240e76206655a872c57719d1d32f2639751eaadad09664defeb44bbfdaa6f0dbb9c5c1a6fae70722b1bff7b1b6a1a30a77e8baba4722e627cdf25b7e05900774b0ce0a8f8c0a128be0f89912e42b88bd52af514feb23c67097393cf886dae77f0b2d49d119fe7488b72093cdba4656666b139015a5ff6c8a92f965849ece092160dff7b05d9a061c063c519b12b0f22d34c19c7b4390eaab92e3b8a5d79aee893f32fbc17ac7844398e9ae4b0b69f4b190e8cb94b471c97662233baa1e32637aa46e2f1cbcf3d06fb99185ea940e5e2a4079bc994d0eb3ce7a44d42acee6f2dc25f86b8724951f51749722ae1719212a8be4f94ad790d2c3591ec5416218467b749d14330ac1e4b84d9b90549582b171d05210f17de66723a6891f735b04f655c8efa76aa128378ac5f3400d912aea7bfe81805f5c18b2ffab62ad81014257aa1206ee087a41294c159f7b97933848d9c3405342ded1b7e49537235f30fe72d45ca3f8ea395bb600819fb0e0e62f021b7e1cea736ce0c0e0d5665ef5acd3d83885e5f4ad6f6e4a9b7c9c115e64947ed41d97fb24eb69d3dfcf00b610553fb3e3b10ab4bef92599ec93be4c917b7f4cd2a63ea762b2232ee311957487782ef65a5b236a42525affdae4c9f94d93b4368baea5f7a642857e362b5cb0ceae00c6cff7022aa81072a1c872655d158b6b325dea9eda8759d8c96c34429b5772c75f471aa42c831585cf5b5c8ca255a165047502c059c740bb3d1e92277a49e4bb0f0f3f53b0376e632255cb50ddccc87c5923a47e74854ecfb47f096a09bdf8c0d311f7ba5a9420b1790881e02679121819790732d9b3aa3577e62a82345fddf6106ce83960ba9886437d5bae08f78f5637e7f3067ec9819e3ab4b5cd5f8b87d60bbbe140c2e55b7402719fcd17149750dd4f213f9f3cd05596188ed81b16ef6b082fa22726872efef4b3d868139a3bddfd059202599fe2bf953025cfb7d36c63ff57ffef10c06026ace603a4622ecece95616eeb381042bee592d3494e981b9dd5976ba656554048a285737cf7c37fa12dfb90937e6e38fa1e33ab2b0b34b07af47290e660544fde1c6255e28ea7c16679f02fe539e0f5defb317f9737c08804dfa9e431dd15ba112af7b017110f5743e65088fcecfd4622329c99a07aabb3ba587f1b0f06981b6d2029172b1920d619ea5ef6f0053125f375d3274722889158938e171c66e4758fedc581bbd6cae18e67e1bef82adea000a9e9067a2264fb86ac00d69a711ff1b829ffa8f5dbf1b572510a3c619f1efd0e73add44c4f1956effbf05510481a7ef9a2abb70a6fae4e3845cb70f66a0558e5e28aebfcc84398adb259a98bec93fb99c017d0d5af9d026e7f7e74ea627da02007824c619a0f02a6071a466299a77f8d5a612fe4a8b22c9a71f32e66ca41be14287186298c4d023284de0545527793d1e6b2f2f8bc86b4fc4c9ab1374812777ec12df8c96a06d6b7c0d4139a288c3bf4b8e0fa79e4ca75be908e4edcd71f9b3947565361e6c00f1e12de52b3a4fc70e7eba502f6b60616e518431df5976071e5d9556bb2828be83660050322731ab6f44ed160c99dc3ee95ce964f70e3a7a0b3ae80ecfc05bb85f19ea7346e309942c255753ae447eae054aa517f4a20bfefa538326ab1b2d3b1898348c497f6c0d07717f58efac56231706802222fc3f350f5dfcd2eec6a4da55fa42d04d0b0038b9c623d39f3f3589ad094a56027546d31364e75e5306136730e2a60be37cfbef1a392a64f63753260e0f6285ae69e69fd15a5e83a4afa971e34ca141b55eef83fb3c700da99c3c72a003817e15fe4353629020b81a9cb28eab4544c89c1f8a9392464c4d25bf838d56b192fbf4cab6a4a20868c2a481100674b56fb34a53118683dbebbd34b2465623d19a272d021ddf78e1a97d00d2b66800b58a8297d49e73e8d482f37f95943f2612690eb3c0369f8b225ce69978a25c8ce3fb3c72d859eb8cbaa5e97fd0b5cfe6c4126a4216c76bc745fee15b58ffaa539d3c56186e33c2c10cf4f5e83d289ec9ce87939c9c91bb3454a3e3cb18357bac5ff7f1e881339823dba618905b64bdb0d4063262faf5103358669b85b58eede46d16b40d14745265b35f66ac02117a8c51866c15e55cccc645166f39f7ccc215bd04b38a2001c62a0c15df3a9f849cf64003a0b855a47de223eb2fca3dd5c74dc5ae1a2cdf2e0cef640d3e13147ce976932c836ec3e99ca40a6b0266d6bfbdfdc865f9158f42af7a582b670d2fb3e9bd93e8461ffe6f02c91af45e45f982798e71c1fe7c448b5afdd400c8f8d94e062cda509e07290c165ffbb40f9a1002ffbb3363a2b13c83e5db19320474e61ffe4585c8e8f9e4c20d7ff21febf7ebe1a7b114a94da481edc5ea71a61e5cbbca6e0bd7cf1bbf8e6542105653b02e00fbbc04da1eb9cace3800f0217aa07d97471ed895b4eef012fb4ec30bda65e8ec03c3d79b475d256c9f11358abc14dff463843889750b5609036eb5f8da0a71c93d3a02c0ddcfeb81e2644e459df61b901ae3d8a5df37bfc955012426eef495df69ea87492040bbb88e6e4416077a6f0fb772d0981ba08f63b24161c6c26034268bbdcc1caf1ff06aa303d5de7f6149c9fcbdbd505e04630c2f23f9d8dbc006b6a197266ed5ada50f826a3f3918adea827c327d1fefd7fccfa7fdeb1e8c2b65ab67e94b71a2fcbd91cc9e5cac48e9cf1dad59b14e2f587d67e135fe43dbd68584ec94a3a539033c1b6b55e96baf449e3e4205795b4bc65fc26156b793eeb6f10313db23866a66f05e024e26a359c345c24011de6de8d279f15dc3235d0804191fe3c3f2c3d227b75a0e87f968e55a469ebbfa87fa059963ecd85667347c077ddf9eb71174ef8d7989cbc46baaeeb237aa6807089a646a6c7d3d26c8f229691e410bc733c0a7c7c8f35178ecda4f7f400a9d2abe9d8b834ba0c8c1c6aab18d3fededabdfe74c18c503c617f4c12d6e625591080f5288b4f55d377958ec3db959168c127ac213d82474d259201fa8166f9b43a7e73a0f9df3498d648e1a68e2dbb049c9f81b2a1cb72adc8761f85caf3fe294de8c67f501c0973e70a8c7beafb07edbab22173744e7b0076b8e29aae8f6397eaa289beb5901ab1e3460ddb9f54e10a7c0874b49c81adb1d5f2ab86ce7803f0940a58414719ffc646249eab2e3e358b1fb5532109a0f0de738ec65517cea391e2949cbacdc1c89677e7a0944ed3638367d1f3137ba1b41b2c2d80d52c8b3384d9a8ee0809f1bdedbec2acf5b1cc333566ce127443f38a47e3d483392a6f0556fd45cf8bfa7eac4321484c740286b53de64c605eab0ffeab20e4c72bf91719372263554f2a221d8627c10decbaf379f9fa3d8ed126436e7c175cee6e2595973fa64b849f9d3917985f6800f144de5c975dae1078acb4681b7c18a9594d7e293332a6213cbb970696c3e5e245880c5bb9050fb2b87f57c639b044f2838f869ad2c88fb701baa4116d4013469f9b19fa7d095090e39905884054d7d897ba487ca5", 0x1000, 0x8}], 0x32, &(0x7f0000001640)={[{@errors_continue='errors=continue'}, {@resize={'resize', 0x3d, 0xfffffffffffffffc}}, {@errors_ro_remount='errors=ro-remount'}, {@data_ordered='data=ordered'}, {@balloc_border='block-allocator=border'}, {@balloc_noborder='block-allocator=noborder'}], [{@fsname={'fsname', 0x3d, '/dev/loop#\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'em1'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@seclabel='seclabel'}, {@uid_gt={'uid>', r3}}]}) lseek(r2, 0x34, 0xb14b426de8541f50) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 00:02:17 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:17 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0xfffffffffffffebf, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000000)=0x8) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:17 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000240)=0x8) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x1f, 0x0, 0xb75, 0xb0, 0x0, 0x6, 0x80000, 0x8, 0x3, 0x3, 0x9, 0xff, 0x0, 0x2, 0x400, 0x100000001, 0x80000001, 0x9, 0x3, 0x6, 0xa2, 0xfffffffffffffffa, 0x6, 0x9, 0x65, 0x9, 0xffffffffffffff7f, 0x7e, 0x4, 0x100000000, 0x8f, 0xe7, 0x6, 0x9, 0x9, 0xfffffffffffffeff, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x20, 0x8, 0x10000, 0x7, 0x6, 0x8001, 0x8001}, r4, 0x6, r0, 0x9) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10) socket$unix(0x1, 0x2, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) 00:02:17 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r0 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r2 = getegid() ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r2]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r0, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:17 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x2, &(0x7f0000000340)=[0xee00, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:17 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:18 executing program 0: getpid() fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x250480, 0x0) perf_event_open(0x0, r0, 0x5, r1, 0x0) pipe(0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x40, 0x13d000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000002c0)={0x3, 0xa8, &(0x7f0000000200)="02bf8d930da01159a04974a3454894329c99a58a66656f8292c1e48bac53b82597a0686312cab39ca0166077e5408228f09a1b45a06ac04481ee16945e90fed5c0c42d2df18c296dbf5ed2de2c4ef9a51ff92b572e00cbd6cc89f1df23738bae1efeae95d14793fdbc2cbbca11c680a694c2032eb677bc4c741a940ad269b114ba715c656247f5cd1c7476bf9d5c33484e16b97cf21167d4685c9a1db62e24760587b595ea4a2dba"}) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000340)=0x4, 0x4) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r3, 0xc0485630, &(0x7f0000000140)={0x1f, "7fc870907773a1107f9b816e7ba3a533d9aa12e2d9ff12bdd945848067458044", 0x2, 0x1, 0x70, 0x4400, 0x2}) 00:02:18 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:18 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:18 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000140)=0x30) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 00:02:18 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x7ffc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x1f, 0x7, 0x3, 0x5, 0x0, 0x8, 0xe, 0x3, 0x401, 0x7, 0xff, 0x9, 0x20, 0x4, 0x5, 0xffffffffffff8000, 0x1f, 0x80000001, 0x2, 0x80000000, 0xff, 0x9, 0x69f8, 0x80000000, 0x8001, 0x3, 0xa1, 0x6, 0x7, 0x99f000, 0x7, 0x3, 0x4, 0x8, 0x8de6, 0xfffffffffffff001, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x8}, 0x8410, 0x7ff, 0x200, 0x0, 0xc2, 0x0, 0x9}, r1, 0x6, r0, 0x2) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r3, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2256}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7f}, @NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004895}, 0x4) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:18 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, 0x0) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:18 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x2, &(0x7f0000000340)=[0xee00, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:18 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000500)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e4306a3b07d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0xfffffffffffffed2, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='team_slave_0\x00', 0x10) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={&(0x7f00000001c0)='./file1\x00', r1}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x27}, @multicast1}, 0x8) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) syz_mount_image$erofs(&(0x7f0000000140)='erofs\x00', &(0x7f0000000200)='./file0\x00', 0x3dbd, 0x1, &(0x7f0000000340)=[{&(0x7f0000000240)="ec26cc81d6ce910c2b5a90217071e7a02f991fa412b39a3c7f29f38e9c29a3688ea8befee4052cfb6536de356aed4bb2e85599dc7b4a1297a0650943db2c659738502c458a634246f5c233963dc61b9de6b2dc270346dd45b900779f4e658ccd", 0x60, 0x49f5}], 0x11801, &(0x7f00000005c0)={[{@acl='acl'}, {@fault_injection={'fault_injection', 0x3d, 0x7ff}}, {@user_xattr='user_xattr'}, {@nouser_xattr='nouser_xattr'}, {@noacl='noacl'}, {@nouser_xattr='nouser_xattr'}], [{@measure='measure'}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@euid_gt={'euid>', r3}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:18 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000000)={0xfffffffffffffffe, 0x1e, 0x8e4}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:19 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:19 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:19 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x400000000000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) write$P9_RAUTH(r2, &(0x7f0000000000)={0x14, 0x67, 0x2, {0x0, 0x1, 0x6}}, 0x14) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) ioctl$RTC_PIE_OFF(r2, 0x7006) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f00000000c0)={0x4, [0x0, 0x0, 0x0, 0x0]}) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 00:02:19 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x2, &(0x7f0000000340)=[0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:19 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, 0x0) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:19 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c000000040000000000000000000000030000800000"], 0x16) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:19 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0xa5, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:19 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) epoll_create(0x2) getgroups(0x0, 0x0) getgroups(0xfffffe4e, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:19 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, 0x0) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:19 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, 0x0) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:19 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c000000040000000000000000000000030000800000"], 0x16) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:20 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x2, &(0x7f0000000340)=[0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:20 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3, 0x100600) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000240), 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000140)={0xfff, {{0xa, 0x4e22, 0xd02, @ipv4={[], [], @rand_addr=0x20}, 0x6}}}, 0x88) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:20 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) bind$pptp(r1, &(0x7f0000000200)={0x18, 0x2, {0x1, @remote}}, 0x1e) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000140)=""/178, &(0x7f0000000000)=0xb2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x20000000000000, 0x2000001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) r3 = getpgrp(0x0) r4 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r1, &(0x7f0000000040)={r1, r1, 0x8}) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:20 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, 0x0) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:20 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c000000040000000000000000000000030000800000"], 0x16) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:20 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000580)={0x9e, 0x3f, 0x9, "1c759c553a98629047076a6b6bf81855314071a0b7256ef4f4c4f87e5360a3634352abfda964d3d13233d60709ae406fefcb1272fcf5644ea5b137d0d10116cc93e0d571349f02b25e5c055d995f0528c5bf3b4739c02c63eabc5b42b0847781f2ff0187a37ab5e473789559985d765f797d5ae452cb3df59c7ed989ab43cbace2bc9f431a442b40894931c96c4ec575c61e099d9043a4e5888d454c9ef6"}) getgroups(0x0, 0x0) getgroups(0x0, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000140)={{0x2000, 0x100000, 0xf, 0x2, 0x5, 0x21, 0x0, 0x7f, 0x3, 0xfffffffffffff001, 0xc66, 0x1}, {0x0, 0x0, 0x1b, 0x1, 0xffff, 0x7, 0x200, 0xffc, 0x4, 0x0, 0x7f800000000000, 0x9}, {0x5001, 0x104004, 0xd, 0x4, 0x8, 0xffff, 0x0, 0x18000000000, 0x72cfb6d1, 0x5, 0x5, 0x80000000}, {0xd000, 0x100000, 0x8, 0x8, 0x3, 0x5, 0x1000, 0x8, 0x9, 0x3, 0x80, 0xffffffff}, {0xf000, 0x0, 0xd, 0x2b3a2a2a, 0x3, 0x9, 0x8, 0x8000, 0x1, 0x22, 0xfffffffffffffe00, 0x80000001}, {0x0, 0x0, 0x10, 0x1, 0x0, 0xb, 0x1, 0x20, 0xd67e, 0x8001, 0x3632c000000, 0x35}, {0xd000, 0x2000, 0xf, 0x7, 0x5, 0xffffffff, 0xad1, 0x8, 0x5, 0x80000001, 0x7fffffff, 0x7fff}, {0x100000, 0x0, 0xb, 0x800, 0x6, 0x7, 0x80, 0xfffffffffffffff9, 0xb1d9, 0x0, 0x80000001, 0x7}, {0x117007, 0x4000}, {0xf001, 0x2000}, 0x2001000c, 0x0, 0x6000, 0x10000, 0xf, 0x100, 0x6000, [0x0, 0x7ff, 0x8, 0xfffffffffffffff7]}) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) sigaltstack(&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000640)) r3 = request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000280)='#\x00', 0x0) keyctl$get_persistent(0x16, r2, r3) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000340)="360f156da1660f3081fc5e00000066ba4000b8f4670000ef670f01d1c4c1d16cbe00280000b8a05e00000f23c80f21f835080000000f23f8c4c17e7f92f5ca0000f087a900b000000f01cf", 0x4b}], 0x1, 0x30, &(0x7f0000000500)=[@cr4={0x1, 0x100}, @flags={0x3, 0x4000}], 0x2) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:20 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(0x0, &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:20 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000400000000000000000000000300008000000000030000000000000000"], 0x21) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:20 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:20 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, 0x0) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:20 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x2, &(0x7f0000000340)=[0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:20 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040)) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000000)={0x2, 0x4}) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:20 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000400000000000000000000000300008000000000030000000000000000"], 0x21) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:21 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9, 0x400) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:21 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(0x0, &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:21 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r0}) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000500)={@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, {&(0x7f00000008c0)=""/4096, 0x1000}, &(0x7f0000000200), 0x3a}, 0xa0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r3) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000040)) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000000)) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) r4 = shmget(0x0, 0x3000, 0x20a, &(0x7f0000ffb000/0x3000)=nil) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000700)={0x9, {{0x2, 0x4e20, @local}}, 0x1, 0x2, [{{0x2, 0x4e23, @empty}}, {{0x2, 0x4e22, @remote}}]}, 0x190) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000140)=""/127) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:21 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000400000000000000000000000300008000000000030000000000000000"], 0x21) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:21 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$inet_dccp_buf(r1, 0x21, 0xe, &(0x7f00000001c0)=""/177, &(0x7f0000000000)=0xb1) epoll_wait(r1, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x101) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:21 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(0x0, &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:21 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(0x0, &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:21 executing program 5: socket$inet6(0xa, 0x0, 0x8001) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) write$P9_RLERROR(r0, &(0x7f0000000000)={0x9, 0x7, 0x2}, 0x9) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) accept$nfc_llcp(r0, &(0x7f0000000140), &(0x7f0000000040)=0x60) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:21 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000400000000000000000000000300008000000000030000000000000000000000000000"], 0x27) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:21 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(0x0, &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:21 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x200000) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r4 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r4, 0x894c, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) setsockopt$sock_void(r2, 0x1, 0x1b, 0x0, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 00:02:21 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) open_by_handle_at(r1, &(0x7f0000000200)={0x9e, 0x8, "15c5e9591cb18ab33c72e32e40e9df0172761e73ab0e153bdf32501abd254c4f12bec26de530323f2e6bb3b81aa47946a3d410053f0267ef7713586967230ebec3ed6cb346928c7541afbcb845df46cde6e1cd1631c732cbe066b18e7706d2c8eb6b5435eab9e28caf4551b445977a657de7d3794da82b3232e5038da1137f6dc05aaa785fd378f023df24548e457eda754f569614a6"}, 0x2000) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000340)={0x800100a, 0x3, 0x3}) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0xc00, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x1}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x804) 00:02:21 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000400000000000000000000000300008000000000030000000000000000000000000000"], 0x27) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:21 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(0x0, &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:22 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x0, 0x6a00) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000200)={0x0, 0x3, 0xffffffff, [], &(0x7f00000001c0)=0x7ff}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x200080, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000140)={0xc, {0x8001, 0xfffffffffffffff8, 0x5, 0x6}, {0xe1, 0x2, 0x811, 0x8}, {0xffffffffffffffff, 0x9}}) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, 0x0) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(r3, 0x1, 0x1, 0x0, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) 00:02:22 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(0x0, &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:22 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000000)={{0x0, @loopback, 0x4e21, 0x2, 'nq\x00', 0x30, 0x52, 0x75}, {@multicast2, 0x4e22, 0x2004, 0x1, 0x5, 0x10000}}, 0x44) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:22 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000400000000000000000000000300008000000000030000000000000000000000000000"], 0x27) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:22 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write(r0, &(0x7f0000000140)="2fa46c693ba25d68dda9ba685972ad601ec25429138557b89ce66c48579885b68f96a724c6cceb3e0c1f2765abe71db061296e4c0501918a8810262cff5ca1d94d1ab32b2435a7d3d12eb60d03d60ea5381ec2bd4427f7de265cf33a5e43567f8e438d7b464761df58b995a52876430a74cc873718faabf10c0a54ec20589364ae264a44131a87ca6473f08fe70563b938c5d0192d3072054c566d724fc71931ed99403836aa69629dc0904c0ea442f581bfbd7dff8c94451512c5086668d4a94b6843d04f9d85add18bef8b5c87cbc6be4b365886ce1f2c", 0x374) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) r4 = getgid() setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={r2, r3, r4}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r6 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r6, 0x894c, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x40, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r6, 0xc040564b, &(0x7f0000000000)={0x7f, 0x0, 0x300f, 0x80, 0x325d7711, {0x7fffffff, 0x800000000000000}, 0xc1297681ae9cb073}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) write$vnet(r6, &(0x7f0000001500)={0x1, {&(0x7f0000000440)=""/4096, 0x1000, &(0x7f0000001440)=""/142, 0x3, 0x4}}, 0x68) 00:02:22 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', 0x0) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:22 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(0x0, &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:22 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @mcast1, 0x75}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e21, @rand_addr=0x4}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e24, 0x94, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}, @in={0x2, 0x4e23, @remote}], 0x88) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:22 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000400000000000000000000000300008000000000030000000000000000000000000000000000"], 0x2a) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:22 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:22 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(0x0, &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:23 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000000)="7e11ba17036c7b05d83ff05b8b1c28", 0xf}, {&(0x7f0000000140)="2b0f3f523d6f9e662aec17ed8a963056c08b46373c730c3a8a695341295681235bfa572632506a9492ac9470a1a890563489f0ae7287f71dd7be494cbab9f80b62c3dffc23bd3d56752a61824d1b1c86363c", 0x52}, {&(0x7f00000001c0)="b360d75ef7948e1a8a795d1075b0ff5420c0966ecd1bffacdec6db07732bd36ece2c754118dd717c6215c7029fad268242d8e2ab8e22d0bb5f16d1083b04191e1e6864c02f3fc362288d749c52e0c839121116dc9a381d4231e5a190314a434171907888a320ee489230300d6e64b3b0fb1d41788a9e7f13e34e1d4be25ee7b51f0a5bd57ab37fb5de736450da4290fe9924463d2210ba2ab14a7a56b1f546228cff787430f9eb446241454386f76a1e0a7cde11b847f6705d121935b7bf84a4f2b536e1906affc104e3d882f2be2c3bca14", 0xd2}, {&(0x7f0000000500)="2aaeeca2b6559b4b1d374a86deaf126d21e4c737bc37e8e53b77fe320f0ba0e30333f0d4bc2dd69680e00a1930edf57f05bc7d749ed9350f9c1c7c5ed1209d898860adfa95538971b177820338fd044e97ea32aa23c9a750e286f9b81e1c56dbb996bd600bd08b63468c0ed10c9d48ac311515e58830d18e007244db959ada11275ea6ae1df39ea3401b15cff0dad76f67dc7de3328e58c7e30ecc740e1c23c53443b25dcc9706c3f0e583111a2bb9245e78f4e06b477aeee127c1472c6d6159d3de0fe5d83254c7a555a82a042869957ce78319b7c88827103897b136a125ec591970665974cac4e6d8c93a35b769d209bc5f5d75b549b2", 0xf8}, {&(0x7f0000000340)="5b4eea478b36433423edcda3ff98eee95df8786c87b528b2d46cf20933b1f2f1e3b541c21ce46df44549774eec52b77dd671ff672bff2c5b5127e73c15e8be4fa97f5ad90d6c9052aecb5e657b46d88f88995c89f1cbb2b62e1ef04de198e3c7ec98cba998bf3893c301585297fe540df0d5f5da", 0x74}, {&(0x7f0000000600)="50b66c6d936b5f6a494c2782c8a92e7f30316cbf6ce540d225a4b3f4926f9f42e9200c2d694ea3943cd6665ea8f36f13bb43be3901849a51ddf8e94f340036b1a6c824cf36b4e973275cf4c6badbf519d70bb174837f0800452aacec9da01c35069c597584358fdf68ba40e0c3a1b3be1868ba48", 0x74}, {&(0x7f0000000700)="52a9282abf4446dba1aba19766e32f7797d4e77bae4108511ca0ae7ac198a79a6f467eb62465fb0aeb21a8883ea7e69097870da4359b7d41e0dafc4fc3a4fe79d47ff05b2a71bc0829cf358b8dfe465670c1fab483b8ae2270896e6a5d9ffb998db005e060eb430d2e94", 0x6a}, {&(0x7f0000000780)="5123a881a3a3a85255b49fb7546c84ba3c6a18e36aa59caa38cb7d867050fae93d8d0ffd871dfc75d8ded419480ce44203134b6a837a391d01cd66acf3ce0ba2ce0901bd30f7c5507d1bcf4d3c7e73959f1ac5269874d36aad3fdda1bede0d6689e30a9309fb14402bed97f412b198af327d41f84434fa3c72ebf00aff603b830283f14ddbdbc587fec4ffc3e42390f819c550a5af589518502a7d31a14af61310dde136c6b8444d84798a8dfe78389d2ad315fba8ef1334d29f8046fc0cf6f4b079cf5bb672ec177e38d919d0fadadd054d3b39c18c350dca1765c5f992c5d7eab5361185b5918117cbd5798f28aa5652e41e20aaf7b11e56c16b82cdff24b40f59220de8ffef27ec2186415281032a4dea1191df9b1c15d90adc518cc15f8deded5d09c620e65fc71d3871ccb9c749d68f458dd4f91d64a0d80a306a70f42058ecd29b1403d5132a6e5eb85bbf2d701e14e29045ca544f4248ce867c5b6fc07638fd8d13303f7d036c787065bf3660fe88381884dff1eee15462e7ab7f1f2c1b91e78b456cb6c2e6a16b213b6b1fa868425516f18ecf57f69e06e8e4f051f947bd5a8c7b16b63d0bc03d38746084f897aa2fbe2eb008794eba2b315623476f5213473c579cb5cd10c7b95851ae807973b87a1485635f89b79a6ee0b62a705f12952da3f3026cf8af7ed67d2eb4dabfaa5507e039af74d6c8f26d811a268f8d85ca7cf30725a5f326a7dd0b3047c0bd5ba9c8688c9e235522f60da8e9dac0ab11de81999e83d0b8921bebb64ddb84048b66c1dcf9214a581bd04608a65747c58f2cff0687897cd513c348939ed5cd931cf17a82a0f464c056389cf2eee20c7e94c6968534ee1ca903e20022f30015ab2b8f1b6832afdb784880f3e8c15fa973ed0d86bf358155c9ccb56dabf38fc1234066fb6b057f89b7904c4e5ef0470eedb16aff860eb7df4c73c6eb43675886f1130de3f3014f80647de962fb1782c70edca23e38b942f13367e5af3de2eed27aed930c8b7151d927b900d1b8b88c3182fd650555f04aea5d4eb65e520446238924623bdcfb881bbd232daf78c825c7ea9d8b8bce987efcf85052806bfa53c4b9619ac524e21b5a7893a7eeda17273c70372a057edb79b6a18efc10dea2c4b7c6f94d174325d4919bcff8e0e44812b36fb9c27747918ba26123f149d63151ad99aaae4daafe39a8d2967e451693c389ddec3fff6381901b50e2dd79ee74f10d5968a55775205003f6b4e0338ce4538d02998998e188180ea39681f1bfa288a87f03339a5ab952e5f6a2d6e6d71be7b01a1012020f6eda92b325ee05a91d1db82c0293fa455062062295414c679ed619fd29119af72341cc84d0f55ac7bb4de2c59614bac218aa31d287c9cc5abc021bee0bd51f52f82713bfc824220d24d7349ac5527cf7e4bfa2e0fb549f434356406a477fefb7f2b2c6267d606624d94d1d5e95cc49ba7ea1f74bb37b84d68e42c317cda9d71cc197e86a3f4cff3f8897a0b029b13f8ae23a026e3cfcdcc7081223ca5c26f00b4691cc4119a6760f9923d25dc4c1a3b1f606616a54907364fdc0df336426a155cfa32dcf7a748a755e5480e587b4a78c01a5e53e47ef8563c9349d1f38e93ff5f9f10996119f978168695719695b659202d3712a73dd899817e94e38ac023922e43527f8b9eb6a85ade97bcd0b8a95a204d29be9ebc2e0f38c2a9c4cf299182f336d0c090495644067b381448c447acca6ffba1505c3de1b2664c1d0d21dd4ef436d74fd88f574c0ea7e255b54074024d181dfa30c1683135533c5e605c5d98aafc30c16a6e798069bca4754772b72f10773164310df5c7da6a05bf900d30503fd70d45e3063b967c561bcb0abda35486e9abea16b1105b8cbba1a9e152f0630d5cc9751249b4fe10d2c9c472c9703ec94614fef6ec91e3e34600e70e8508f3c2ff3ffb2bdd5fc6eb7c27a40ce294b83702a1bc076684fa29d9ac5b7108c338205b846733a58cd282780fa966c502d64c98b8dd88ef284e0941bd911dce0a2f71da535941cbcb3bae9c583f9e6f9ac385c8c08be77fe01fd4836c6680c0bed16331f237dc665b054e5998404f24a0e39803763c0e937224993f5b51acd242602e5b4a25096f78380a3cfe3c4036d788d42296416d46ecc90a89b98356d5617afff6334059111c0a1310d5fc879000a2aedb5e6a158f34e36dcb4c7716511229633d3f8e7396aa618cb8865f20ebb961dae2e425c28fcbe7669e04fc785ca2c2d70815987c68e1f2a900055dff19127eaef78ac93a5c4de93374e96e3c71c4ff69f5a88cc50d4edf88c51bfa43c320b0edd263eb32e42ab8bb07bd948eaa5460c1a59955b0d76a7d73a3e4bee68501715bc08268270171fd63a4a4a56bd5c5b73f696cca77f04011d0367789dd27f9298fd7f1089259020b07bc9f8e81f874f7cdb895b833301745f52c81b4e1db398efbc185e6b6c4cc97a8882b9bcee3140082a89ce755f80b98bb2eb0f1e7533b728d656df152d20909a6af20790c73d8f5cc36a211d023ef37a792368a4bf03f91b829a4d20c772044ccbcd595261922f3e97f9beea37bc33b6e95ef953b6e0ddc895ede8fdaa1785cd7c8c58380fe2aada8b232ccb519cbca8f58e3ca4cfc6eefdae4f25659e49a1745d55e65aa4ca1cd6aefc8e527a3dca795d7fa20d0e390e5669b59e98abad519398e74bc0774236087eb2856e16e7a971ed6c2b84221feeb4a7d9fb006d132e739254dc611e6f80ece254594b1dbff82d02d79277eec049efd445863a709d43357d12d761ee62bbc18cfc31ce5f22fed872f60ac6116b0bbfa6f74ad1eb82a411fa17802bda51369da7028c98c33974f0fa8319250c1b950a93b8625d67e3614ea68bfcebff182ad4ce0bebfcd2e1da7a5feeebed897375ebe8cb28991c033c3cb0408b74b0ad1a2c3ba517138678c6eae650d24b9d70cbaf76fbb9a8225a06c6ac9f79c678dce3c37d373e7ff52d98299c60515ba58770ed03f03a003a1e2c65438ec3aafbe675ed61e354b7775eead281bd1e605aaef5098b949ee646c974a72d24f0081f30d0412a629cd80252c51c1bfdda5a7b0e60e437c10ead6bd45e12523d34b14f4f4c5e360161c18f8c3dbe74e733cdf3465a6f648ee8ff0ffc522f7b98ba59943db6e84a5d11d70f5d95cf873db61494f97198e7cab060100aadaf534c3ef46c587826193c5357479359de4f4506e87bf167f3a6cd85fcafe210af3b45d9d682688f8ca15f5fe161690165b51f29cf6b91b12854df95118cf291564358d60b75d8f05175434f5b9a90638f05cc8ea928489cd645991084604ff24f6d9f0cc07cdd78f63944701929dbe5b8b2bbbdeffa2f05b91a5d4d6b9f85c8021ca4f0189935e43357250d3c3f2e98a688ac3383adf502f788ae041c2a7cabb6a0db107ff289ed8c024a7fd5a379805d052678a6e8fdf9652f135f47ef881f42a97436e93c26e8ec07638c6049287d53a08ee104773d4dfaad5c67ff0b30019b145b41d7980f1c086bf3e1633cd975b0af1da6c993a294209ee8f5bd8461f02eb7d3fd2e56ca01f04a6d39c648b97c9b1b7fd061135a0d1fff143cc06a7607ec322ba62557fcde4948ff19a3bca80f1286cebdc897cb5764d1279acf7fa59f7e778d81183226523d2485adf4338aca044c4d1fe87681989749bf153bde3ea25da685f869fa5fe644d8d231d4bed540edd286c419dc12e70bae9ba1d7fd8a298c44afa7bd072404d3c405591f4d7aff27f007927a8b0e21ccff80be2a3f7c6a49e71421e330c7213d9d9fc28a94f06691067226adf0be396388bcf2a130a9402dfc7fedf182cbc0769d6d92547488b2bca3fad0db71ad13ebdc4164c67e768dc1e26439ddeaec2baedd0214de5ef503825832bb9c868d18a89d0ad9272cb180a3d59f25c5f964e3bf823ac0f80f4a7e0c2c912d783cb6ae38b1591aa59ba6cbcfd850301fb05fb8442060d5cb4da8347cd365f9996bb16b43d730fe289f0fd88aab412851064db3a1c1e3fea92c157527bc2ea11511a3bf3a08d5e6bdffe1391e508b418b40efa7b1d39c165ccf381cf1a2ad6e745b61538c125ecfe1b6ce847b33ac5d46816b9e886b0d7c0341feefdfac6e7f124eb84c58b25917e512ded04280c61307537c5f960f4edc58baa20b6f1576bd492ccd9d67d6ae2422da8740d3311333a38a68b472a7f8d51c7c1662f2e9ba6ee7218784dad4ebd932d93c8ace609412691056e16a10ea7da3f4171d156d15e8e6d2ece4b35de21e3e5a09aca35e68b2ae26731a1bf21de07da1ad0e86c94e460dc2f3c912d2e281b0802f8d2780627b6a9e24a2b69c3eb964cd18fa6c5eba54a75dfe5a66a18760e0fc4e4448d7153d91a887bad736b9933b0115bf87a8510abbf49a6e518ab6a0830a1d432dfab95df7e013930aa7429b2e777b7c559d21ed54e64e0ea7c6105d81d3d6244f1d49d2c5703aaa9b8c2b028b8ac6e00b49f074f412d9d070b005dcfca9e07d676c2d86b139a1f671de604d4b70dce31d8fa0af8989ec13a8552589ba975d00b2f40ddfb8a91311763a0882e2f81a75135af62c10b67274620e49d0d2a6a6a2a7a29077750c255b49e02d0a26acd8647bd5f20e9e773122e0ebce14bd205f60042a8ef919aef42a82531f6cb32fc09ab3168516a26c5fd6a2d8e5be1026e1da0b05b73fc8d9836a67806536f63832eb3022503eed17b2107ff8000538da5ad9dcd097973f9489ac3768b565bed6ffd19d7a93b1c31fc13058e110e1c0ec82b89526cd170420d859f08c4aafb0cd882970bf273299ae8f4c4564c2e736d5424a55a6cd419db39f922e089bdcab2a0753f7b516e23d77dc7d82cc8a53a29b62518b4c71427b42c67b9153aeae09111e0739950d439755f8dcff46c41e4d2daafa34a9d02bef79319ee6456c8258f2b44ea25f63823b19fca023d509ea39b07d96a8bfb73dae7c55fbdf708b4c11d095854f1521a2c62e597d0ea3f8131c057d1be542e8fa621ad7c8322fc727cf602bce757be8d826e64b5c00317742463b6f94ccc64a28a00b20d27e9aad013b2688d4c3c6739f60505d5e3e5259971033c3004bc534b94e43f81d216975a4fa4ff87047f2b97e6a2c793d0a1987f3c0c783a32f062c41d73739dd2275c28d826efb0882e36cdbdaf7e9eb2cd20efb2fdf5bb0a9d23b91d1be5145e8831d26b44fcfafa80ffb759f9c0e0634b6687cd8f96f4f2b0cf2a88bc532b4b43c5fc555b75be9f9dd572d3715b0170548f432b926554c02f2f20524abe9038441e2f295c8a90098559625123e87d864f6a3ee552f16036cec3129f275c4982c4ed79574ff9088df9934ac4f874cc5abe54d87f5f24efcf17d9bd2db6725cb5b6ef14383f9e89baa85f172834e2d7f1e57b981bf2c60ddc3835ba08239f7c29608b3593a60b083eec2f35adf137f83e0c76a80a8e1c92f76543ee9ac85aba73f6b5d7f44e9983ed63ed4d3318066d908f07d33c459affd9bd6ebd22c5f56fc9029863b23806236bab41ccfad370edcb50833d2b46448070e392335b45d62516b9109053362cb8cd2fa1028a983cfd03de98955000f28ac8040a73b0a2848466fe91c2753d8cb0ccabebdb6c74df58b96c51d20b2d76ff010c6f45b4d0f6fa0a450f7a5004150c50b29248cb4b3f72e67462818c8d813ffa7659734d9b2d1b6e1ffd24e195c830db883cf6ea0cef34764b6a27930d6501cd551dcafee1502dd195a93569914f98792ffc03328d4432412208c3e702ef41d447bb1e1eb", 0x1000}, {&(0x7f0000000040)="c58ad91273747b033c260696ba7eda1b979ff3ed", 0x14}], 0x9, &(0x7f0000001840)="43a6ffa2d6340f5ff36b147c513d66184598f604180503b94a377f7a85c2047e80be3836ed08499808cf184d93f028257883af11b878bb572d086ccd7693152efd04ddbddace098c77630a6ff93c380ccd82d9838512bca0a4", 0x59, 0x8000}, 0x800) socket$bt_rfcomm(0x1f, 0x0, 0x3) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:23 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000400000000000000000000000300008000000000030000000000000000000000000000000000"], 0x2a) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:23 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:23 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', 0x0) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:23 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', 0x0) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:23 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) process_vm_writev(r1, &(0x7f0000000600)=[{&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000200)=""/132, 0x84}, {&(0x7f0000000000)=""/96, 0x60}, {&(0x7f0000000500)=""/220, 0xdc}, {&(0x7f0000000340)=""/124, 0x7c}, {&(0x7f0000000700)=""/247, 0xf7}, {&(0x7f0000000800)=""/237, 0xed}], 0x7, &(0x7f0000000400)=[{&(0x7f0000000900)=""/88, 0x58}, {&(0x7f0000000980)=""/142, 0x8e}], 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r3) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000a40)=0x840, 0x4) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:23 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000400000000000000000000000300008000000000030000000000000000000000000000000000"], 0x2a) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:23 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2, 0x200800) syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x2, 0x2) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x410040, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x2a0240, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e21, @rand_addr=0x80}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}, @in6={0xa, 0x4e22, 0x0, @loopback, 0x20}, @in6={0xa, 0x4e24, 0x40, @local, 0x9}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x88) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$RTC_UIE_OFF(r2, 0x7004) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 00:02:23 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x4) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:23 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', 0x0) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:23 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c000000040000000000000000000000030000800000000003000000000000000000000000000000000000"], 0x2b) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:23 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f00000000c0)=0x100000000) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000002c0)=0xffffffff, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000180)={0x81, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) setsockopt$sock_timeval(r2, 0x1, 0x0, &(0x7f0000000340)={r3, r4/1000+10000}, 0x10) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/59, 0x3b, 0x20, &(0x7f0000000140)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, [], 0xa}, 0x100000000}, 0x1c) 00:02:24 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', 0x0) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:24 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', 0x0) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:24 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x6}) getgroups(0xfffffffffffffd88, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:24 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c000000040000000000000000000000030000800000000003000000000000000000000000000000000000"], 0x2b) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:24 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000000)=0x3, 0x8) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:24 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', 0x0) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:24 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) sendmmsg$unix(r3, &(0x7f0000001740)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000000)=[{&(0x7f00000001c0)="5dd7ada1dd02731789863330e6b9d7a3bba3848a8a64736b735553a4ddaa070abe6270a1071a382724555c2ae49068ab8de94e1da6bd1380eb87c76eb436d7320b8a3f63fe8f612fc3e3142f9538bdf2c5ef068494a5f37fddba2a27", 0x5c}], 0x1, &(0x7f0000000240)=[@rights={0x18, 0x1, 0x1, [r1, r0]}, @rights={0x18, 0x1, 0x1, [r3, r2]}], 0x30, 0x400c000}, {&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000300)="d4e5fd06d61da2063d0f9f52a182f611ba04d6c16dc9194cc4ce179e645c6c6f067848aa6cc8c56f2d1d3a679a2b62a05a31de2b82a7fa0dd2ca8b701b35150d3ac0658d07a9a4b8a8397a4ff76e950e794f8e62749326ece60389074dde9dcffa751e20236e258c473ec9bcf2f2d94aded4d80430605cf72964c1f810eca2fe1d48c446bed79a6951c1f4022a979fb01dabfa84d4b90f4c7f6fd345b09f360653c3d589e1", 0xa5}, {&(0x7f00000003c0)="0a084f31571ef9104a7f0ef760533a5c5ff6960480fd0d2b1dc26fa0ccd5f777", 0x20}, {&(0x7f0000000400)="a9007eeaf972b42e93678bda56b8cd83fe37a7af829b0cec6d04fc6abb3d27ee0cdd574002481733057a65dbf0eab4e4ba4d240a565862477129a0ca4b9ccc2cadf9c52b2cbd598ce8464f049b3e696a6ff0221eab6e0458aecb55b992d094b686651f631c24222da3007d36d96df5838323d671401d263339a809c7ec5dcb6a50ce56ac9d64143923013b2f4a15455fc348e5a416256005d90789dd7b070d74f7f6f563a1f5857be23631956dcb0141f2359740c64c8e5df653034c4dc6a2ad542e12b52d7787b96ef4ea6f9e270253f8ddde77", 0xd4}, {&(0x7f0000000500)="d9628243979d3f81b06ef67515b29a07ac3823c59ed1472c4a159a1cec8f46d93b9a54702cb8e0f6a787aa80e97426fd03b3103fbe752fa6f7ff6a35da48d11f550b95dba363ddebfe69b70e4b6b26209776d17867dd1090cbcbb7e462ff65b9", 0x60}, {&(0x7f0000000580)="b38dff4646dec94bb6d0983fa67fed2e3d21b5d2643be0e3d1f737b6fdbc8b", 0x1f}, {&(0x7f00000005c0)="c77e5399ffa8ad15e49b7589ed54bfd4964cfbbbb3320a5ad1c64449970db34f6b0af7eb0d0aa7e65e10791486759295b8d0e534efff61fb8182621a1041a3426d59b59700453ff75e1afb2272a321d5a1491facd954636569193d2fe8abfca1c38b0669dc1d97379bf82abae09d4e111e185113c889441ff0eedd14c118", 0x7e}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="27e4e06b6b1bed7c6658a804de022025ecb14d7a95c1409bf2bb5c1eb86ee897016be156db7892edd4d76d", 0x2b}], 0x8, &(0x7f0000001700)=[@rights={0x20, 0x1, 0x1, [r2, r0, r1]}], 0x20, 0x880}], 0x2, 0x800) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) 00:02:24 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'hsr0\x00', 0x9}) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:24 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c000000040000000000000000000000030000800000000003000000000000000000000000000000000000"], 0x2b) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:24 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:24 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x10000000000, 0x2, 0x1000000000, 0x9}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:24 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', 0x0) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:24 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000000)={0x0, 0x8, 0x40, 0x4, 0x9, 0x1, 0xfffffffffffff000}) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:24 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(0xffffffffffffffff, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:25 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(0xffffffffffffffff, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:25 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000140)={0x0, @bt={0x8, 0xffffffffffff8001, 0x0, 0x1, 0x400, 0x6, 0x1f, 0x7, 0x8, 0x800, 0xd35a, 0x9, 0x1, 0x6, 0xa97b140e25182b27, 0x2}}) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x43929e880277e4ea, 0x0) clock_gettime(0x6, &(0x7f0000000000)) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:25 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:25 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', 0x0) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:25 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(0xffffffffffffffff, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:25 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:25 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 00:02:25 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:25 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000280)=0xe8) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2, &(0x7f0000000500)={[{@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x93}}, {@mode={'mode', 0x3d, 0x6d5}}, {@mode={'mode', 0x3d, 0x3}}], [{@smackfshat={'smackfshat', 0x3d, 'user\x00'}}, {@uid_eq={'uid', 0x3d, r2}}, {@hash='hash'}, {@permit_directio='permit_directio'}, {@pcr={'pcr', 0x3d, 0x27}}, {@fsmagic={'fsmagic', 0x3d, 0x30}}]}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:25 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:25 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:25 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) fdatasync(r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(r1, 0x0, 0x0, 0x0, 0x3) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) 00:02:25 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:26 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) getsockname(r1, &(0x7f0000000180)=@can, &(0x7f0000000200)=0x80) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x6, 0x1, 0x5e0, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}, 0x20) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:26 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:26 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:26 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x33f, 0x3ff, 0x8, 0xfffffffffffffff8, 0x8, @dev={[], 0x16}}, 0x10) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:26 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:26 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, 0x0, 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:26 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:26 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000000)) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:26 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x32a) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvfrom$ax25(r1, &(0x7f0000000140)=""/159, 0x9f, 0x100, &(0x7f0000000200)={{0x3, @bcast, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) 00:02:26 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, 0x0, 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:26 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:26 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:26 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0x20, 0x4) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:27 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r3 = syz_open_dev$usbmon(0x0, 0x400, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000240)={0x18, 0x0, {0x2, @remote, 'gretap0\x00'}}) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000140)=""/205) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000340)="dc3bcc4f34cae1fe1b272b73b42745841ec356d44bd5de44bcb60e79e499a95c380e3e85ea3c5b5b092156cb3a1cf30c0910a0744d531cf60947f9a958fd19da5bf219bf70152b06b900cb3839f6f4304654c003e4f2d1515b1c0d2d063ece475465fa706eaea56d1d174c669aecc9ed9004542be598d04e79d6ab0ef1750a37e7ae52fc48d755a1b872bd3c9b0bcc08a01cc12476c1d29f58b813bac42525f6b8b3652ceb2923f6fb091062944350fe33a756cdc0f0af743d22a295c71c9d9f0b87be1934aae3fd292da47dc84338f975ed598a4e9886225f5bca7e95b69770407cb1356ea03aea096de2568785491e2bc0962c8131f9f05000") stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000002c0)) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) syncfs(r1) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) 00:02:27 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, 0x0, 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:27 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:27 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r3) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'syz_tun\x00', 0x10001}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x6, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x1) getgroups(0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x3) syz_extract_tcp_res(&(0x7f0000000100), 0x9, 0x5) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)=ANY=[], 0x0, 0x1) 00:02:27 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:27 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000200)={0xe13, 0xfe000000000000}) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000240)) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x80000001}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x0, 0x202, 0xfffffffffffffff9, 0x200, r2}, &(0x7f00000001c0)=0x10) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:27 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:27 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:27 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:27 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:27 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:27 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000000)='\x00', 0xffffffffffffffff}, 0x30) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x1, 0x0, 0x0, r3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 00:02:28 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:28 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:28 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) getsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000000)=""/6, &(0x7f0000000140)=0x6) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:28 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:28 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:28 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000040)=0xf) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000000)=0x3f) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:28 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:28 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000240)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=0x0) perf_event_open(0x0, r1, 0x0, r0, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) ioctl$sock_netdev_private(r3, 0x89f5, &(0x7f0000000000)="6e8d48391f52a14c95fefccf824a73a0434b57bd62f7016f6136bf7791d5b3687a79d876") fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000000140)) 00:02:28 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:28 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:28 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:28 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:28 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x9, 0x1b, 0x8, "f0a82e3013034242c2a36e7b411aea727fa77b925c2d457476c38468352a6669bbefb1ac2e2a456e647730d5176460ef3eb97addd177a34afe1f5f6adad0b739", "b83b93131c8aea42eb2ec4b6d3b53c53984de506e11fa235131bfe69008300dff2827e4bcd06e2a38d74f57716fd0428ba554a10d3cab559cd0699518edbcc03", "b072156c8b0d91fee3ff3da2382b36488045c95d4234c8f737cd2a91e4dde0c1", [0xff, 0x3]}) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:28 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:28 executing program 5: iopl(0x0) socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000140)=""/215, 0xd7, 0x8, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:28 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:28 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x802, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000001c0)={0x5, 0x0, 0x10003, 0xe45}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000200)={0x100000000, r1, 0x10001, 0xa49}) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0xfffffffffffffe43) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000002c0)=0x17d) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0xe7648ecfff4e8d66, 0x0) connect$tipc(r4, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x4, 0x3}}, 0x10) setsockopt$sock_void(r3, 0x1, 0x0, 0x0, 0x0) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000140)) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) write$FUSE_GETXATTR(r3, &(0x7f0000000280)={0x18, 0x0, 0x4, {0x9}}, 0x18) 00:02:29 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:29 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x55, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x100a}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @in={0x2, 0x4e22, @broadcast}}}, 0x90) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:29 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:29 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:29 executing program 0: r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0xca6) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) perf_event_open(0x0, r2, 0x0, r1, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r4 = dup3(r3, r3, 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}], 0x2c) r5 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r5, 0x894c, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x7, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fa7, 0xb7, 0x3}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0x2e6, &(0x7f00001a7f05)=""/251}, 0x48) syz_open_dev$evdev(0x0, 0xff, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4004700e, 0xffffffff00000000) syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r6 = getegid() getgroups(0x2, &(0x7f0000000280)=[r6, r6]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) 00:02:29 executing program 5: socket$inet6(0xa, 0x5, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x1b0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:29 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:29 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:29 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x6, 0x4, 0x4, 0xfff, 0x5, 0x0, 0x0, {0x0, @in6={{0xa, 0x4e23, 0x3, @remote, 0x7}}, 0x6, 0xe873, 0x7, 0xff, 0x561}}, &(0x7f0000000000)=0xb0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000200)={r2, 0x7c8, 0x7}, 0x8) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 00:02:29 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:29 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:29 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r0, 0x1, &(0x7f0000000000)="bd5413c582261a8d1c73631a03d3ada0d70c406f72ca5dcdf0074f031f6291cf3b9eb3121645955eceabc261339b9f611591552519eead3bf7a413601d4bba6d7e121b063b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000140)=""/39, &(0x7f0000000180)=0x27) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:29 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10030}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x300, 0x70bd28, 0x25dfdbff, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x20}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:30 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:30 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:30 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:30 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:30 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x5, 0x2, @thr={&(0x7f0000000000)="9cf25ce4a254a67051a14e5db2776737cb22702554f615ab4a5910c41abae861c3f27d130351375749", &(0x7f0000000140)="b968d197e81bcf6d668c2f5d747faba49fbb73b05991c3317a39b6f2057afeec48233fcb34f09b3f9d9313b64ed639938918ff09ab9fd9ac05d27ec8c63845ab50ba2c5aae1503cebb56ace5d1eee510081de61ee30e10598cb8c796fda0f252b5beb92aa89447273cc195c5eeeaa9fea925343eb9aae3a19d1fd1ea58ea1f0e44b8dc1db2aeb9eccad3c5fa7e2fdd2d2e4152ffa3eee497922eb60d5a9732131df2ecce0468efc2002b05327d6043af8803a0f930898db283b5efc1dbf8f25ab1edfbd0286822d10d796c082db112"}}, &(0x7f0000000280)=0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x4000, 0x0) sendmsg$nl_generic(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xdc, 0x24, 0x0, 0x70bd29, 0x25dfdbfb, {0x12}, [@generic="2b11e6a1b60061e9f74192f1e0ade2c1f6b98f65b91e8255085e762b500c190684b0a41da1477e11b4b939ae7dbf7ad6bdfc0e6f834ef694c82587a48798597e5fb4323d5ecf5a43792b4768f5c24c49f6e41a0880dcfc7ddefebd7ffb4bfddaebec924c8a3e8d04af82039b3639b14bb089dce052561e8118148a1e855de9e28566e2e5db39c5a2a99acc6c28d17e4ed453cc684e3c095e34087ac05a1c440cdd259ef8b0b4a153a5c98d882609b89122267ef53770fe71ba46d16aa3b33315dde11841860d7c"]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x800) timer_getoverrun(r0) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) r4 = geteuid() mount$9p_xen(&(0x7f00000002c0)='!%em1}em1\f\\\xc4]\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x214020, &(0x7f0000000380)={'trans=xen,', {[{@msize={'msize', 0x3d, 0x3}}], [{@euid_lt={'euid<', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x37, 0x63, 0x3b, 0x62, 0x61, 0x33], 0x2d, [0x77, 0x31, 0x36, 0x7d], 0x2d, [0x0, 0x73, 0x32, 0x37], 0x2d, [0x34, 0x76, 0x36, 0x7e], 0x2d, [0x72, 0x0, 0x0, 0x32, 0x37, 0x38, 0x77edda1204375f60, 0x39]}}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}}) ioctl$sock_SIOCGSKNS(r3, 0x894c, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) 00:02:30 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:30 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:30 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) chdir(&(0x7f0000000000)='./file0\x00') getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:30 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:30 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000000)={0x5, 0x7, 0x3, 0x1f, 0x100000000}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:30 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:31 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:31 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:31 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r2, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x10) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:31 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) connect$rds(r1, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:31 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x1, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:31 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(r1, 0x1, 0x40000000000001b, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:31 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:31 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:31 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:31 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0x9c, "49c3049aea50a3ec167c9f3da22151c0aeae82edd6bc184e7ced1f30dbe0504893677c23fd9e3877b0998419d59003c2d41ba14f272539b1975eb76233f9bb34f3e5c51b2470fc6866c87c9f73865c678846979c50f5a3784c04b44bb6fa90740fe666ef84a7e792271d6309c809a9a4bf0b9782ce66d1b160236c2da7b96c72a5ed4e47a191ba48ec231f61f245e0ae68b3f4e8aed0ea6d6c837d88"}, &(0x7f0000000000)=0xa4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={r2, 0x9, 0x5}, &(0x7f0000000200)=0x8) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) membarrier(0x1, 0x0) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:31 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400) pipe(0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 00:02:31 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x1, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:31 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) perf_event_open$cgroup(&(0x7f0000000140)={0x7, 0x70, 0xfffffffffffffffd, 0x1, 0x6, 0x5, 0x0, 0x1f, 0x2, 0xb, 0x7ff, 0xffff, 0x7fffffff, 0x5, 0x3f, 0x6, 0x6, 0x101, 0xfffffffffffffffb, 0x1fa, 0x6, 0x2eee, 0xc000000000000000, 0xd01, 0x6, 0x0, 0x4, 0x3ff, 0x7, 0x400, 0x3ff, 0xfffffffffffffff8, 0x81, 0x5, 0x4, 0x8, 0x200, 0x7fffffff, 0x0, 0x81, 0x2, @perf_bp={&(0x7f0000000040), 0xc}, 0x81, 0x100000000, 0x7fff, 0x1, 0x8001, 0x101, 0x1}, r0, 0xf, r1, 0xc) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x1f, 0x130) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:31 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000140)={0x4, 0x3, 0xab}) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000000)=0x800) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:31 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:31 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:31 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x65, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:32 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x1, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:32 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) write$UHID_CREATE(r1, &(0x7f0000000200)={0x0, 'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000140)=""/171, 0xab, 0x6, 0x10001, 0x40, 0x8, 0xfffffffffffffffc}, 0x120) 00:02:32 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x180, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x7f, 0xd09}) r1 = add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540)="937115dcaa6f3b15c3058451d6e64b784563fed56599f222abc153b0fbb7ba9fc7fcf10ca737aa99875e1f765c3f91a4126ee2b0b7141db460a296360d5efc09cb03ec52", 0x44, 0xfffffffffffffffa) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000340)="90bf71689d42242905858462b9ba8654f5feabe7334ec8fa83bf84e723127cc3c578f467155fe06bda7dd85c5c8494201d0ff455da65b2816c294635f5365c3bbe5d6fd0", 0x44, r1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x401000101ff, 0x0) prctl$PR_SET_TSC(0x1a, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) keyctl$revoke(0x3, r2) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0xfe31, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000140)={@initdev}, &(0x7f0000000180)=0x14) 00:02:32 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x1, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:32 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:32 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x1, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) [ 1558.120213][T27142] QAT: Invalid ioctl [ 1558.183993][T27136] QAT: Invalid ioctl 00:02:32 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) r2 = gettid() getpgrp(r2) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:32 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x1, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) [ 1558.249847][T27151] QAT: Invalid ioctl [ 1558.286898][T27154] QAT: Invalid ioctl 00:02:32 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x1, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:32 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffff9c, 0x10, &(0x7f0000000380)={&(0x7f0000000340)=""/8, 0x8, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=r2, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000540)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x100, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) sendto$inet6(r0, &(0x7f0000000200)="83bc913f01f1330955a2de31d0e4b0d623c3e18cbad6449e774e0243db34fa70fe8daa4de5d7cf9cf4eb19cd9e979976e0fd55d7ed14564277fc93d86f81e7eb0caf9c4de0832f4cdbf3307f5c31583aa81877b332b9a6835b944547e54e0001344f3592674db58381bdb247fce88e25c4ab6c25973be2349af422794e7bdabc8d5a3ed3fc27be227ae6e9eb1d3e9a5d1e50b6a5fd4cf91c914a6e08b0e94cd119eade477a5a787ced50079158d64012cbbbe16948a3be5d3a191184", 0xbc, 0x8800, 0x0, 0x0) keyctl$revoke(0x3, r3) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0xfffffd59, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:32 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:32 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x5) 00:02:32 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x1, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:32 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x1, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:33 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000140)=ANY=[@ANYBLOB="0200ba00bed244576c320a60ae6533885c8240a6ff5022b35f1e9be0c75290f14920639e074f7f01bb91d12232f5ba885bd69f2427885400214ac6225f112eacc6808beba5bde378d5cfc06ca18ff3a9f0430430a448ebe086826738e355bc4a2a4c5186b3209127ba0a37c13fce99f57ccc427d38b71c603ee1e83b469035334ffc49b851eb35d996fe8077bff04fa484a51746a26f973fb82e14408942d0b52240dbaafd435db458d622a8488d0f8e8497b508223a2f1fd2c9097cbdf4"]) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:33 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:33 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) prctl$PR_SET_TSC(0x1a, 0x2) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x2, 0x0}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000180)={0x0, r3}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000000)=0x4) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 00:02:33 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x1, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:33 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x100000000000800, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x8000000000000000, 0x0, @perf_bp={0x0}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:33 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:33 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000c2bbd7000ffdbdf25030000000c00020001000000000000000c000500261e0000000000001c1617dcfd579df831a8098154c823dfdda5c0c833463563418f816fb80f8dc783079217c16d3c3da3a12c557c9b8fbbe15a2e882c384d0f1dd5341e3ad6632c3ab77b94ab8f886fe20da389b438e3a15f43a9bc530e0614c71ca4675c00ca73e531d409085664b827e0034add1c6f83d2d4962716bed82a25409b033d06c1a748f4903e7d6296c1c722de132a7eb6ecc3dde342f36c80d25f2a5647ea4bf5ae95c401a36b3bce0f2bc64bd2a6ba0d3f106e0058bbc8573cc703441e59"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:02:33 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x1, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:33 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x1, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:33 executing program 5: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1400) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) r1 = getpgid(0x0) ptrace$setopts(0x4200, r1, 0x9, 0x100000) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:33 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:33 executing program 5: socket$inet6(0xa, 0x800, 0xd1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:33 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:33 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x1, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:34 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:34 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:34 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(r2, 0x1, 0xfffffffffffffffd, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x5, 0x7fffffff, 0x2, 0x7aaa, 0x100000001, 0x7, 0x50ae, 0x0, 0x0}, &(0x7f0000000180)=0x20) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000001c0)={r3, 0x2a7, 0xd8, "3a5fafa9157ba4ff2ec0037f5145978320fb43cbeaa2af235c02f58243086f5ba3c64cd416081785821b7a46a6c3572f3ff632d7c1ab1050b537183511657033fa4c9c37c70d541bca4f2afe747d2cd9e6bb06bf6c68a7e672d85977d191fcba94435ffc7df50f711704537727f77538ee437c28d10c91915d8fde24a42ff8f4b21fdc4b0ab4d23520a67e73d8c259042f41fcd5344763a58d737a100ac28cea298c5cb27810c758f12b619ecf41c6b26a6a1beaca6a1fbafd3085d888d37470d99c36d4af54347edf2cdf8cb33551002ebe69ac9f276570"}, 0xe0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 00:02:34 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x1, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:34 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000)={r0, 0xffff, 0x5}, &(0x7f0000000140)={'enc=', 'pkcs1', ' hash=', {'rmd128-generic\x00'}}, &(0x7f0000000040)="9038a788567ed9a1c8b7a7fc4ae7c1c9bd8ab41811eecabdf5b00c1c88fc9c3913a03ab28623d66bf6e0507d", &(0x7f00000001c0)=""/182) 00:02:34 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x1, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:34 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:34 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) seccomp(0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000100)) syz_execute_func(&(0x7f0000000140)="3666440f9bf56664400f9f3241c3c4e2c9975842c4c27d794e003e0f351162f610f610cd0464add864f1326e0f72d600") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000040)={0x200000000000000, 0x101000, 0x2, 0x4, 0x3}) keyctl$revoke(0x3, r2) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000180), 0x4) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x4e2a7b936c8ad3bf, 0x4) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:34 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000700)=[@in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e20, 0xf1, @mcast2, 0xf08}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x5, @loopback, 0x2}], 0x78) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) sendmsg$nfc_llcp(r1, &(0x7f00000006c0)={&(0x7f0000000140)={0x27, 0x0, 0x1, 0x5, 0x5, 0x40, "25bdbf76186cb4bf5cd935ed65d14861ad9afdf89b69e3d3572cde57bda623e5151b6cf9930a7949a607f1d389d46d465fc157b89f13fe4eb17c0ab4b3c4cc", 0x9}, 0x60, &(0x7f00000005c0)=[{&(0x7f00000001c0)="e8890062a1b8e4547a669648dc4bb48afb8d915b72f1406351976d0292bc2b157f6054429adca60cf84bd38d89347295a86cfb942802cd8bda369b2435da12d024e38435800a4e946ebe5f6cf50f8684", 0x50}, {&(0x7f0000000240)="c7f6856ace6b80c8334b6ff2ae3915ad937dd78bb40ed656b9da96e606d0d740e6c8e3e3703257fe2bec1b38c2fe852a6f75fa6867d58025f7c5d5b7e7e8403440763dc6521eba1aa8c2084303f7138d97b07a06e020846fcf57143af17573f005072e19f59d22473634f5018223142dc89fbeda9b69128d4c679d322caa8ef18a293e1d9341d418722e964e87bee66a3fa4dbd375dae9660b110288a35cf03ec66a6377dcfc55e03e91cdbab5455606e9aca5812a112c8e5128d759ea5467da46f924d9df98465138f7ffa7b77f7ed19acbce9506b025ad761a173e4690c607189ac91c9c3fcf0c7e9ddae9aaaddd7d60045cfc192711fea9", 0xf9}, {&(0x7f0000000340)="61fb2357026259f1099b2d2bc713dc815fdd186f8ac4b11aad2d67fdbe42bd87f602b13ca509b6c6ce3036a7634a6cf375e4f47c70debc96034d7e62b3fd213cde41725decc97929a963abb56d5a6a632a62f94af6cd616753aed0332a6f1afa6e6595e2cf5e62e470fc0b4fd9ef12126b764efcc37a7808b62b72d19b6ab3d52d61afc762199fec980416b1b5b2d86bf945f6f06a93ee328149ab40d2ac8e5c1b609d53", 0xa4}, {&(0x7f0000000000)="e965355360947565420f1d28730e1dd941a18a846280723a94772da300b572d16341a12a98", 0x25}, {&(0x7f0000000400)="b08fd7b93923a8a7bfd6d834af340c4f2c850f3c24f47fe0e90100433027bfc11e301a199a745ef98b7455dfe30bcc4f56f35e61a24aa7cfbe7f91fc95d5d4a2a18debfb85f9ba46ae6c7032750712c8677dec6e73e17c04156b449b6a907a6ed3075756f4d781afc2be1a03c43197bc019be2df88a472ab477039e9a2978e10f260c1c5a7", 0x85}, {&(0x7f00000004c0)="0e9767c217ab7ce1ee04c85bc0417c372fd2d377037e9a", 0x17}, {&(0x7f0000000500)="84122960a6e916f34752c42970d518e243b634c4a75de93a0d2a9dbdb7a376d3b38b1f3d5d8106c2192a0d778b69bf54397937", 0x33}, {&(0x7f0000000540)="41503b635303dbf092532fee34037824060aeaa423b8a9b056b7830d2d7a3d37cedec4d1bb977574bcb88c5b6ca0744d6dcc532f7600e043b15b1ec9446361c53b00abf1a6deca5ad6eb6b7a7bc8d05356c4eb674e42294864", 0x59}], 0x8, &(0x7f0000000640)={0x48, 0xff, 0x4, "1e75d887049c4a654a4fef29f9d0ab204dbead2e8cf6f4c5427f1e932646b2c16b6c07ba7fe6fbbe083fb0110bc591f21184a8b9b4"}, 0x48, 0x800}, 0x4000000) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000780)='/dev/snd/pcmC#D#c\x00', 0x4, 0x400000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) [ 1560.510568][ T26] audit: type=1326 audit(1550275354.768:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27301 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 00:02:34 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x1, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:34 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:34 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:34 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) eventfd(0x1) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:35 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000000)) 00:02:35 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x1, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:35 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:35 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb2621b957f3b4afcfd4c93c7f9dbf0568c6e095ba76c853e0daf69d73b615a76b5fbaf3e59a4f1e327b168204a3ce72b02aa199"], 0x1, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:35 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) accept4$unix(r0, &(0x7f0000000000), &(0x7f0000000140)=0x6e, 0x80000) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000180)=0x4, 0x4) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:35 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x1f, &(0x7f0000000000), &(0x7f0000000140)=0x4) 00:02:35 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:35 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:35 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r3) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x398, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000b40)) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) chdir(&(0x7f0000000b80)='./file0\x00') ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000bc0)={r2, r1}) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) sendmsg(r0, &(0x7f0000000b00)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2, 0x3}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000140)="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", 0xfa}, {&(0x7f0000000240)="cc9dcf9864004579eccfa669f97ee12850f45060db70d1ce362359839e1c7ee74a8475d4a2dbce3310870fc7f2861d07f1a65472fe53ce2bc4f2e37ee7f086f23050a3dde6cefff472d83c9161c3977e34b140f58565fb71fcd6586ada399e7a", 0x60}, {&(0x7f0000000340)="016c1f61da5ebaa41e0ed55ed3f235ab1995bec10ce0e0d68e033853c126bbd87b74e2d0375b67d2e5edd49066ede526df74a32a49f40b84812955d70add5879cbb31e1d7c45cbb0da9c104bb46cad5f718194b891", 0x55}, {&(0x7f0000000500)="f450d725efdcec726054da13d30a5009cc0a177e159708e88c8f4cf3205f31e366700fcf5c86c7bcd48a978d1e34ebd5ada31ececf2998dd6e65a5b03ed08b114eb1661985e540f9e04f8f943ed05cbe142f2acd175988d793923ac60d532ef1ef03844ca5604012ee81352cb21e8c74bd67572ff895513f1c2f60291370dcc926d9ecab8c981440937a53e508e9f5b94ddd228b311f49e0a15a0babd04b27d144d98445072b2ef2c62a5ab30072fc6ac8a39bd8ea8b759535ae15c3456ef478585d76ec8c4cfbe7bc2d040c", 0xcc}, {&(0x7f0000000400)="bf202450acea06aaa452fe13c0fa32c804263c6bd480ab9a3cfbba5d753cf293c6ae", 0x22}], 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x3d8}, 0x0) 00:02:35 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:35 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x5, @ipv4={[], [], @rand_addr=0x80}, 0xb9}, @in6={0xa, 0x4e20, 0x8000, @loopback, 0xff}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x1, @ipv4={[], [], @rand_addr=0x1f}, 0x6f}, @in6={0xa, 0x4e23, 0x9, @local, 0x1f}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, [], 0x12}, 0x1}, @in={0x2, 0x4e20, @rand_addr=0x9}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x93, @remote, 0x827}], 0xe8) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000000)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:35 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:36 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0xffffffffffffff18, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:36 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:36 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) r2 = gettid() ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x6, 0xff, 0x81, 0x4, 0x0, r2}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:36 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = accept4$packet(0xffffffffffffff9c, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14, 0x80800) accept$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000000)={0xff, 0xffffffffffffa91a}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vfio/vfio\x00', 0x4a0040, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') 00:02:36 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:36 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:36 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x1, 0x800) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000200)=0x5) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$nfc_llcp(r2, &(0x7f0000000140), &(0x7f0000000040)=0x60, 0x800) r3 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r3) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:36 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:36 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:36 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:36 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:36 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=@profile={'permprofile ', 'system.[system\x00'}, 0x1b) 00:02:37 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) sendfile(r1, r0, &(0x7f0000000000), 0x1000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000000180)) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x7f}) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) 00:02:37 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:37 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:37 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000000)={0xfaa, "4677e9fcceaa8ec584d8abdfa9be8af7684d5d76fb2596e374a62492a902c8d0", 0x2, 0x1}) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:37 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:37 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:37 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) fstat(r0, &(0x7f0000000000)) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) socket$inet6_udplite(0xa, 0x2, 0x88) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x41c042, 0x0) r2 = msgget(0x2, 0x281) msgrcv(r2, &(0x7f0000000140)={0x0, ""/173}, 0xb5, 0x0, 0x800) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0xfffffedb, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:37 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:37 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:37 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:37 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x73, @multicast2, 0x4e24, 0x1, 'fo\x00', 0x20, 0x3f, 0x6e}, {@remote, 0x4e23, 0x2, 0x1, 0x9, 0x20}}, 0x44) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:37 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:37 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x8, 0x8200) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES32=r5, @ANYRESOCT=r4, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYPTR64, @ANYRESHEX=0x0, @ANYRES16=r0, @ANYPTR, @ANYRES16=0x0, @ANYRES16=r3, @ANYPTR, @ANYRESHEX=r1], @ANYPTR, @ANYRES64=0x0, @ANYRESDEC, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRES32=r2], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRES64=r2], @ANYRESOCT=r2, @ANYRESHEX=r1], @ANYRESDEC=r5, @ANYRES16=r5, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES64=r2, @ANYRESHEX=r1, @ANYRESOCT=r2, @ANYRES16=0x0], @ANYRES64=r1]], 0x5, 0x0) 00:02:38 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:38 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x7, @rand_addr="75aee848c9a86b8039d73d9502754b6e", 0x1f}, 0x1c) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x8040, 0x0) ioctl$IMGETVERSION(r2, 0x80044942, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x3) r4 = getpgrp(0xffffffffffffffff) prlimit64(r4, 0x8, &(0x7f0000000280)={0x0, 0xd796}, &(0x7f00000002c0)) 00:02:38 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:38 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:38 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000180)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYRES16, @ANYRES16=r0, @ANYRESHEX=r1, @ANYRES64=r1], 0x5, 0x0) 00:02:38 executing program 0: r0 = fcntl$getown(0xffffffffffffff9c, 0x9) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) r4 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r4, 0x894c, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000140)={'ip6gretap0\x00', {0x2, 0x4e23, @rand_addr=0x1}}) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000000)={0x7, 0xfe, 0x3, 0x7}, 0x8) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) 00:02:38 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:38 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:38 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0xfffffffffffffe81, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:38 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 00:02:38 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:38 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:38 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0xfffffffffffffdfb, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:39 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000140)={r2}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:39 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:39 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:39 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:39 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:39 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:39 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) write$FUSE_STATFS(r1, &(0x7f0000000340)={0x60, 0x0, 0x5, {{0x3f, 0x6, 0xe978, 0x0, 0x1, 0xfff, 0x3d, 0x7fff}}}, 0x60) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x2, &(0x7f0000000240)=0x2) keyctl$revoke(0x3, r3) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000a80)={0x100, 0x1, 'client1\x00', 0x2, "ca65d31728acdd71", "d92759fc58fba81afafa376b2efba86db2be248a11baeee5dc463155aba0830b", 0x617a, 0x4}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000700)={{{@in6, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000800)=0xe8) fstat(r2, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuseblk\x00', 0x208000, &(0x7f00000008c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x3f}}, {@max_read={'max_read', 0x3d, 0x7}}], [{@fsname={'fsname', 0x3d, 'security\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'trusted.overlay.upper\x00'}}, {@subj_type={'subj_type', 0x3d, 'client1\x00'}}, {@pcr={'pcr', 0x3d, 0x6}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x37, 0x64, 0x34, 0x36, 0x3f, 0x71, 0x77], 0x2d, [0x77, 0x7b, 0x37, 0x65], 0x2d, [0x30, 0x66, 0x71, 0x65], 0x2d, [0x65, 0x37, 0x63], 0x2d, [0x7f, 0x31, 0x63, 0x37, 0x73, 0x65, 0x38, 0x30]}}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@measure='measure'}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x73, 0x36, 0x76, 0x3b5bea753db96c11, 0x7f, 0x34, 0x77], 0x2d, [0x35, 0x36, 0x31, 0x64], 0x2d, [0x64, 0x33, 0x31, 0x77], 0x2d, [0x33, 0x0, 0xf71b413a9d0f72ef, 0x3d], 0x2d, [0x3a, 0x37, 0x73, 0x39, 0x31, 0x63, 0x66, 0x76]}}}]}}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000500)={'security\x00', 0xbe, "40b61ab393cbab3cbc853b94317049257e838a006c7873df20e7f39e02b3c1f8c61efb7b422856764217896b055f30cd1d883a799a5922b4c06750b2eebd01e683f7f905250e6134c8db4b60c514c5b4d24ac4b0e1ae0fbbc30a7dd338037869f38685c0bc7fb7c3c9e695e1e2a74e94beb539d3e76375dcd8cdabd680baec74ba301200831c4392b558ae925d277a12f37d8e74ad356aac24822d3c7aab168611b16d400224a9174e048f7218e55f6fca6687b95bd49c29895722eca657"}, &(0x7f0000000040)=0xe2) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x101000000, 0x1000000000000}) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000280)) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:39 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x3) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:39 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:39 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0', [{0x20, '.%P'}], 0xa, "4cbdb5ac3391f6bb57f189ceb79703a05f76eaf5d4231b0b3abbfb241dba0ed12edb237557c613ec9866c9ab0b91f6f5440a998121a866c086122e5c78f419125d604dca8d024f1ac8a6bf1238f2b98c0023b402d1179db592525e1f99ae7dfb159cd569a0e0bf37b40596c862ac15c906a11a71743bad911c6a56e9beb689ad683c662f78d45641b601dcba1726ead8ccefdcbde84c91c598d3e50a630f53c543e93b4a79ea9080a6eb94c74a5c2dcb62129c8c7b51ef8ae9b286960be863a96b2cc3bcb618026918fd56a03aee6c9471"}, 0xe0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:39 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:39 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:39 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:39 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x7, 0xffffffffffffffff, 0x0) keyctl$revoke(0x3, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000000)={0x6, 0x9, 0x4, 0x9967, 0x5, 0x10001}) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:40 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCEXCL(r1, 0x540c) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:40 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:02:40 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x329, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000000)=0x1000, 0x8) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 00:02:40 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b", 0x91, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb6504ff3bd045ec76ed4346a75eca22a017e01420c5ba21b5bd3d2c5600000000e0ddb7b8b5af20bc55309bd37904b6eb26"], 0x1, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) 00:02:40 executing program 3: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 00:02:40 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000001c0)=0x0) tkill(r2, 0xe24f) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x0, 0x1f}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setrlimit(0x5, &(0x7f0000000000)={0x7, 0x1}) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:02:40 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:02:40 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f0", 0x7f, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x0, 0x0) getgroups(0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x6) getgroups(0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) [ 1566.397310][ T5] ================================================================== [ 1566.405614][ T5] BUG: KASAN: use-after-free in debugfs_remove+0x10d/0x130 [ 1566.412826][ T5] Read of size 8 at addr ffff88802268c640 by task kworker/0:0/5 [ 1566.412834][ T5] [ 1566.412851][ T5] CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 5.0.0-rc6-next-20190214 #35 [ 1566.412859][ T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1566.412878][ T5] Workqueue: events __blk_release_queue [ 1566.412887][ T5] Call Trace: [ 1566.412910][ T5] dump_stack+0x172/0x1f0 [ 1566.412933][ T5] ? debugfs_remove+0x10d/0x130 [ 1566.431374][ T5] print_address_description.cold+0x7c/0x20d [ 1566.431392][ T5] ? debugfs_remove+0x10d/0x130 [ 1566.431407][ T5] ? debugfs_remove+0x10d/0x130 [ 1566.431422][ T5] kasan_report.cold+0x1b/0x40 [ 1566.431440][ T5] ? kobject_del+0x30/0x30 [ 1566.431453][ T5] ? debugfs_remove+0x10d/0x130 [ 1566.431473][ T5] __asan_report_load8_noabort+0x14/0x20 00:02:40 executing program 1: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000080000000000300000000000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 1566.431486][ T5] debugfs_remove+0x10d/0x130 [ 1566.431506][ T5] blk_trace_free+0x38/0x140 [ 1566.431527][ T5] __blk_trace_remove+0x78/0xa0 [ 1566.450400][ T5] blk_trace_shutdown+0x67/0x90 [ 1566.450422][ T5] __blk_release_queue+0x1dc/0x3a0 [ 1566.450446][ T5] process_one_work+0x98e/0x1790 [ 1566.459641][ T5] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1566.459658][ T5] ? lock_acquire+0x16f/0x3f0 [ 1566.459693][ T5] worker_thread+0x98/0xe40 [ 1566.475363][ T5] kthread+0x357/0x430 [ 1566.475383][ T5] ? process_one_work+0x1790/0x1790 [ 1566.475405][ T5] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1566.495037][ T5] ret_from_fork+0x3a/0x50 [ 1566.495062][ T5] [ 1566.495071][ T5] Allocated by task 27674: [ 1566.495091][ T5] save_stack+0x45/0xd0 [ 1566.495107][ T5] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1566.495120][ T5] kasan_slab_alloc+0xf/0x20 [ 1566.495132][ T5] kmem_cache_alloc+0x12d/0x710 [ 1566.495143][ T5] __d_alloc+0x2e/0x8c0 [ 1566.495153][ T5] d_alloc+0x4d/0x2b0 [ 1566.495164][ T5] d_alloc_parallel+0xf4/0x1bc0 [ 1566.495176][ T5] __lookup_slow+0x1ab/0x500 [ 1566.495188][ T5] lookup_one_len+0x16d/0x1a0 [ 1566.495210][ T5] start_creating+0xbf/0x1e0 [ 1566.508890][T27707] kobject: 'loop0' (000000005e7a5aba): kobject_uevent_env [ 1566.509320][ T5] __debugfs_create_file+0x65/0x400 [ 1566.509340][ T5] debugfs_create_file+0x5a/0x70 [ 1566.516386][T27707] kobject: 'loop0' (000000005e7a5aba): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1566.519274][ T5] do_blk_trace_setup+0x376/0xb90 [ 1566.519288][ T5] __blk_trace_setup+0xe3/0x190 [ 1566.519302][ T5] blk_trace_ioctl+0x170/0x300 [ 1566.519317][ T5] blkdev_ioctl+0x12c/0x1c40 [ 1566.519332][ T5] block_ioctl+0xee/0x130 [ 1566.519353][ T5] do_vfs_ioctl+0xd6e/0x1390 [ 1566.527402][T27707] kobject: 'holders' (000000007968eb79): kobject_add_internal: parent: 'loop0', set: '' [ 1566.529640][ T5] ksys_ioctl+0xab/0xd0 [ 1566.529654][ T5] __x64_sys_ioctl+0x73/0xb0 [ 1566.529671][ T5] do_syscall_64+0x103/0x610 [ 1566.529689][ T5] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1566.529701][ T5] [ 1566.536468][T27707] kobject: 'slaves' (00000000161b330b): kobject_add_internal: parent: 'loop0', set: '' [ 1566.538882][ T5] Freed by task 16: [ 1566.538904][ T5] save_stack+0x45/0xd0 [ 1566.538919][ T5] __kasan_slab_free+0x102/0x150 [ 1566.538933][ T5] kasan_slab_free+0xe/0x10 [ 1566.538947][ T5] kmem_cache_free+0x86/0x260 [ 1566.538968][ T5] __d_free+0x20/0x30 [ 1566.546116][T27707] kobject: 'loop0' (000000005e7a5aba): kobject_uevent_env [ 1566.548233][ T5] rcu_core+0x928/0x1390 [ 1566.548252][ T5] __do_softirq+0x266/0x95a [ 1566.548257][ T5] [ 1566.548270][ T5] The buggy address belongs to the object at ffff88802268c600 [ 1566.548270][ T5] which belongs to the cache dentry(33:syz0) of size 288 [ 1566.548283][ T5] The buggy address is located 64 bytes inside of [ 1566.548283][ T5] 288-byte region [ffff88802268c600, ffff88802268c720) [ 1566.548295][ T5] The buggy address belongs to the page: [ 1566.556649][T27707] kobject: 'loop0' (000000005e7a5aba): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1566.558969][ T5] page:ffffea000089a300 count:1 mapcount:0 mapping:ffff88802f143c80 index:0x0 [ 1566.558984][ T5] flags: 0x1fffc0000000200(slab) [ 1566.559006][ T5] raw: 01fffc0000000200 ffffea0000ff0888 ffffea00026bf688 ffff88802f143c80 [ 1566.559023][ T5] raw: 0000000000000000 ffff88802268c080 000000010000000b ffff8880568f03c0 [ 1566.559030][ T5] page dumped because: kasan: bad access detected [ 1566.559036][ T5] page->mem_cgroup:ffff8880568f03c0 [ 1566.559048][ T5] [ 1566.570779][T27707] kobject: 'queue' (000000006ed55693): kobject_add_internal: parent: 'loop0', set: '' [ 1566.575585][ T5] Memory state around the buggy address: [ 1566.575601][ T5] ffff88802268c500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1566.575611][ T5] ffff88802268c580: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1566.575621][ T5] >ffff88802268c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1566.575627][ T5] ^ [ 1566.575637][ T5] ffff88802268c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1566.575647][ T5] ffff88802268c700: fb fb fb fb fc fc fc fc fc fc fc fc fb fb fb fb [ 1566.575652][ T5] ================================================================== [ 1566.575657][ T5] Disabling lock debugging due to kernel taint [ 1566.580554][ T5] Kernel panic - not syncing: panic_on_warn set ... [ 1566.593610][T27707] kobject: 'mq' (00000000ea946283): kobject_add_internal: parent: 'loop0', set: '' [ 1566.598343][ T5] CPU: 0 PID: 5 Comm: kworker/0:0 Tainted: G B 5.0.0-rc6-next-20190214 #35 [ 1566.598352][ T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1566.598374][ T5] Workqueue: events __blk_release_queue [ 1566.607682][T27707] kobject: 'mq' (00000000ea946283): kobject_uevent_env [ 1566.612217][ T5] Call Trace: [ 1566.612241][ T5] dump_stack+0x172/0x1f0 [ 1566.612263][ T5] panic+0x2cb/0x65c [ 1566.612279][ T5] ? __warn_printk+0xf3/0xf3 [ 1566.612297][ T5] ? debugfs_remove+0x10d/0x130 [ 1566.612314][ T5] ? preempt_schedule+0x4b/0x60 [ 1566.612337][ T5] ? ___preempt_schedule+0x16/0x18 [ 1566.619835][T27707] kobject: 'mq' (00000000ea946283): kobject_uevent_env: filter function caused the event to drop! [ 1566.624635][ T5] ? trace_hardirqs_on+0x5e/0x230 [ 1566.624654][ T5] ? debugfs_remove+0x10d/0x130 [ 1566.624669][ T5] end_report+0x47/0x4f [ 1566.624682][ T5] ? debugfs_remove+0x10d/0x130 [ 1566.624693][ T5] kasan_report.cold+0xe/0x40 [ 1566.624708][ T5] ? kobject_del+0x30/0x30 [ 1566.624721][ T5] ? debugfs_remove+0x10d/0x130 [ 1566.624738][ T5] __asan_report_load8_noabort+0x14/0x20 [ 1566.624751][ T5] debugfs_remove+0x10d/0x130 [ 1566.624771][ T5] blk_trace_free+0x38/0x140 [ 1566.635726][T27707] kobject: '0' (00000000abafab04): kobject_add_internal: parent: 'mq', set: '' [ 1566.640565][ T5] __blk_trace_remove+0x78/0xa0 [ 1566.640584][ T5] blk_trace_shutdown+0x67/0x90 [ 1566.640611][ T5] __blk_release_queue+0x1dc/0x3a0 [ 1566.647701][T27707] kobject: 'cpu0' (000000008a8b922d): kobject_add_internal: parent: '0', set: '' [ 1566.650461][ T5] process_one_work+0x98e/0x1790 [ 1566.650485][ T5] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1566.650506][ T5] ? lock_acquire+0x16f/0x3f0 [ 1566.658598][T27707] kobject: 'cpu1' (000000001c72c3da): kobject_add_internal: parent: '0', set: '' [ 1566.659843][ T5] worker_thread+0x98/0xe40 [ 1566.659871][ T5] kthread+0x357/0x430 [ 1566.659892][ T5] ? process_one_work+0x1790/0x1790 [ 1566.667926][T27707] kobject: 'queue' (000000006ed55693): kobject_uevent_env [ 1566.668778][ T5] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1566.668815][ T5] ret_from_fork+0x3a/0x50 [ 1566.680226][ T5] Kernel Offset: disabled [ 1567.159253][ T5] Rebooting in 86400 seconds..