27 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r27, 0x4028af11, &(0x7f0000000040))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f0000000500)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000580)="662e72720f2a216d54aa17e89c0d449032e652373ac558b7367ab3499e1527e088ccfe6e9e9da1cb7ef6af600fcc160d65b8cb23fcb40c603f34c8deab3dcea55f929ea931bc", 0x46}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYRES32=r18, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r15, @ANYRES32=r21, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r22, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r24, @ANYRES32, @ANYRES32=r25, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000240000000000000001000000010000", @ANYRES32, @ANYRES32=r26, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000", @ANYRES32, @ANYRES32, @ANYRES32=r27, @ANYBLOB='\x00\x00\x00\x00'], 0xeb, 0x2008044}], 0x3, 0x4c010)
umount2(&(0x7f0000000040)='.\x00', 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x7f12856cac1ab1af, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)

13:48:07 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10)
write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000200200000000000000000000800020000000000", 0x24)

13:48:07 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

13:48:07 executing program 0:
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000540)=0x81, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1})
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x4018)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x2}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:48:07 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1')
r3 = syz_open_dev$rtc(0x0, 0x0, 0x42040)
dup3(r0, r3, 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0)
ftruncate(r4, 0x200004)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

[  590.784588][T14879] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
13:48:08 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8c2f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x240, 0x0, 0x0)

[  591.032445][T14886] device nr0
 entered promiscuous mode
13:48:08 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

13:48:08 executing program 0:
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000540)=0x81, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1})
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x4018)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x2}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:48:08 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8c2f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x240, 0x0, 0x0)

13:48:08 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
unshare(0x40600)
getsockopt$inet_tcp_buf(r2, 0x6, 0x1f, 0x0, &(0x7f0000000000))
lseek(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@initdev, @in6=@initdev}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xe8)
r4 = socket$inet(0xa, 0x80805, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0), 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB], 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
lseek(0xffffffffffffffff, 0x19, 0x0)

13:48:09 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[  591.972938][   T26] audit: type=1800 audit(1573220889.049:202): pid=14914 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16737 res=0
[  592.321522][T14910] device nr0
 entered promiscuous mode
13:48:09 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

13:48:10 executing program 0:
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000540)=0x81, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1})
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x4018)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x2}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:48:10 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = socket$kcm(0x11, 0x2, 0x0)
dup3(r1, r0, 0x0)

13:48:10 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0xc})

13:48:10 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1')
r3 = syz_open_dev$rtc(0x0, 0x0, 0x42040)
dup3(r0, r3, 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0)
ftruncate(r4, 0x200004)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

13:48:10 executing program 2:
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
chroot(0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
symlink(0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x78080, 0x0)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0)
mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="59568e3c344e0000f5ee8cf17b538a01ce2c826f2c3299c98cd5"], 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
pwritev(r0, &(0x7f0000000180), 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0xfffffffa, 0xd8, &(0x7f0000000580)=""/216, 0x0, 0x4, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x6, 0x3f, 0xaa}, 0x10}, 0x70)
syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x400000)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_open_dev$dri(&(0x7f0000000700)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x101100)
socket$kcm(0x29, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
socket(0xa, 0x80001, 0x0)
setuid(0x0)
r6 = socket$inet6(0xa, 0x0, 0x0)
close(r6)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002ec0)='/proc/sys/net/ipv4/\x00\x10/nc_version\x00\x00\x00\x83\xef\xdd&\xd4\xea\xe3T\xc7\xf4NC\\\xa9\x1e\xac\xdd\xcc\xe5uuj\xb7\x0f\xea@\x89\x7f\rs\xc7=p5\x98\x8dg\xf5\x90l\x04\xc6_\xab\r \x98\xd9\xa2\x84\xb12d\x86\r\xe6\a\"#v\xa3}\x82(\xf2\xce\xd9\x14\xaf\x92\x16\xaa\xf9M\xfa\xc9/;Y\x89\xca\x12\xa0o\x8a\xdc\xa8\bP!\xd4\xc8g\x1c\xbd\xff\x90M\x96C~\'r\xe1kFRe\x9cf\xcc\xd7\x1e\xc9\xfb\xf5\n]\x1a;!\xa9\x14\xd6\x05\x13`\f\x1aa\xed\xfa\xcc\xda\t\xe5C\xe6\x8d8\xb2\x17N\xec\x86:wu\xe5\xc3\xddVn\xc3$\xbc^\xb4\xac\b\xca\x16\x02\xcb\xbb>\x04\xf3.>3\xe4\xce\xaf\xb2\x1c\xef\x86\xdb\x03PD\xaf\x7f\xe3\x88\xd71=\x7f\xe5\xe4\x8fls', 0x2, 0x0)
getpid()
write$cgroup_pid(r7, &(0x7f00000036c0), 0x12)
open(0x0, 0x141042, 0x0)
getresgid(&(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880))
lstat(&(0x7f00000018c0)='./bus\x00', &(0x7f0000001900))
getgid()
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r8, 0x4028af11, &(0x7f0000000040))
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r9, 0xaf01, 0x0)
r10 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r10, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r10, 0x4028af11, 0x0)
r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r11, 0x4028af11, &(0x7f0000000040))
r12 = getpid()
sched_setscheduler(r12, 0x5, &(0x7f0000000380))
getpgid(r12)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r13 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r13, 0xaf01, 0x0)
r14 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r14, 0xaf01, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setuid(0x0)
r15 = socket$inet6(0xa, 0x0, 0x0)
close(r15)
r16 = getpid()
getresgid(&(0x7f0000001800)=<r17=>0x0, &(0x7f0000001840), &(0x7f0000001880))
r18 = getgid()
r19 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r19, 0xaf01, 0x0)
r20 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r20, 0xaf01, 0x0)
r21 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r21, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r21, 0x4028af11, 0x0)
r22 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r22, 0xaf01, 0x0)
r23 = getpid()
sched_setscheduler(r23, 0x5, &(0x7f0000000380))
r24 = getpgid(r23)
r25 = getegid()
r26 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r26, 0xaf01, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
r27 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r27, 0x4028af11, &(0x7f0000000040))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f0000000500)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000580)="662e72720f2a216d54aa17e89c0d449032e652373ac558b7367ab3499e1527e088ccfe6e9e9da1cb7ef6af600fcc160d65b8cb23fcb40c603f34c8deab3dcea55f929ea931bc", 0x46}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYRES32=r18, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r15, @ANYRES32=r21, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r22, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r24, @ANYRES32, @ANYRES32=r25, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000240000000000000001000000010000", @ANYRES32, @ANYRES32=r26, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000", @ANYRES32, @ANYRES32, @ANYRES32=r27, @ANYBLOB='\x00\x00\x00\x00'], 0xeb, 0x2008044}], 0x3, 0x4c010)
umount2(&(0x7f0000000040)='.\x00', 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x7f12856cac1ab1af, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)

13:48:10 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
unshare(0x40600)
getsockopt$inet_tcp_buf(r2, 0x6, 0x1f, 0x0, &(0x7f0000000000))
lseek(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@initdev, @in6=@initdev}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xe8)
r4 = socket$inet(0xa, 0x80805, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0), 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB], 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
lseek(0xffffffffffffffff, 0x19, 0x0)

[  593.814569][T14956] device nr0
 entered promiscuous mode
13:48:11 executing program 3:
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
chroot(0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
symlink(0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x78080, 0x0)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0)
mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="59568e3c344e0000f5ee8cf17b538a01ce2c826f2c3299c98cd5"], 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
pwritev(r0, &(0x7f0000000180), 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0xfffffffa, 0xd8, &(0x7f0000000580)=""/216, 0x0, 0x4, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x6, 0x3f, 0xaa}, 0x10}, 0x70)
syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x400000)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_open_dev$dri(&(0x7f0000000700)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x101100)
socket$kcm(0x29, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
socket(0xa, 0x80001, 0x0)
setuid(0x0)
r6 = socket$inet6(0xa, 0x0, 0x0)
close(r6)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002ec0)='/proc/sys/net/ipv4/\x00\x10/nc_version\x00\x00\x00\x83\xef\xdd&\xd4\xea\xe3T\xc7\xf4NC\\\xa9\x1e\xac\xdd\xcc\xe5uuj\xb7\x0f\xea@\x89\x7f\rs\xc7=p5\x98\x8dg\xf5\x90l\x04\xc6_\xab\r \x98\xd9\xa2\x84\xb12d\x86\r\xe6\a\"#v\xa3}\x82(\xf2\xce\xd9\x14\xaf\x92\x16\xaa\xf9M\xfa\xc9/;Y\x89\xca\x12\xa0o\x8a\xdc\xa8\bP!\xd4\xc8g\x1c\xbd\xff\x90M\x96C~\'r\xe1kFRe\x9cf\xcc\xd7\x1e\xc9\xfb\xf5\n]\x1a;!\xa9\x14\xd6\x05\x13`\f\x1aa\xed\xfa\xcc\xda\t\xe5C\xe6\x8d8\xb2\x17N\xec\x86:wu\xe5\xc3\xddVn\xc3$\xbc^\xb4\xac\b\xca\x16\x02\xcb\xbb>\x04\xf3.>3\xe4\xce\xaf\xb2\x1c\xef\x86\xdb\x03PD\xaf\x7f\xe3\x88\xd71=\x7f\xe5\xe4\x8fls', 0x2, 0x0)
getpid()
write$cgroup_pid(r7, &(0x7f00000036c0), 0x12)
open(0x0, 0x141042, 0x0)
getresgid(&(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880))
lstat(&(0x7f00000018c0)='./bus\x00', &(0x7f0000001900))
getgid()
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r8, 0x4028af11, &(0x7f0000000040))
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r9, 0xaf01, 0x0)
r10 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r10, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r10, 0x4028af11, 0x0)
r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r11, 0x4028af11, &(0x7f0000000040))
r12 = getpid()
sched_setscheduler(r12, 0x5, &(0x7f0000000380))
getpgid(r12)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r13 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r13, 0xaf01, 0x0)
r14 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r14, 0xaf01, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setuid(0x0)
r15 = socket$inet6(0xa, 0x0, 0x0)
close(r15)
r16 = getpid()
getresgid(&(0x7f0000001800)=<r17=>0x0, &(0x7f0000001840), &(0x7f0000001880))
r18 = getgid()
r19 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r19, 0xaf01, 0x0)
r20 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r20, 0xaf01, 0x0)
r21 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r21, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r21, 0x4028af11, 0x0)
r22 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r22, 0xaf01, 0x0)
r23 = getpid()
sched_setscheduler(r23, 0x5, &(0x7f0000000380))
r24 = getpgid(r23)
r25 = getegid()
r26 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r26, 0xaf01, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
r27 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r27, 0x4028af11, &(0x7f0000000040))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f0000000500)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000580)="662e72720f2a216d54aa17e89c0d449032e652373ac558b7367ab3499e1527e088ccfe6e9e9da1cb7ef6af600fcc160d65b8cb23fcb40c603f34c8deab3dcea55f929ea931bc", 0x46}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYRES32=r18, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r15, @ANYRES32=r21, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r22, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r24, @ANYRES32, @ANYRES32=r25, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000240000000000000001000000010000", @ANYRES32, @ANYRES32=r26, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000", @ANYRES32, @ANYRES32, @ANYRES32=r27, @ANYBLOB='\x00\x00\x00\x00'], 0xeb, 0x2008044}], 0x3, 0x4c010)
umount2(&(0x7f0000000040)='.\x00', 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x7f12856cac1ab1af, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)

13:48:11 executing program 4:
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
chroot(0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
symlink(0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x78080, 0x0)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0)
mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="59568e3c344e0000f5ee8cf17b538a01ce2c826f2c3299c98cd5"], 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
pwritev(r0, &(0x7f0000000180), 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0xfffffffa, 0xd8, &(0x7f0000000580)=""/216, 0x0, 0x4, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x6, 0x3f, 0xaa}, 0x10}, 0x70)
syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x400000)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_open_dev$dri(&(0x7f0000000700)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x101100)
socket$kcm(0x29, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
socket(0xa, 0x80001, 0x0)
setuid(0x0)
r6 = socket$inet6(0xa, 0x0, 0x0)
close(r6)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002ec0)='/proc/sys/net/ipv4/\x00\x10/nc_version\x00\x00\x00\x83\xef\xdd&\xd4\xea\xe3T\xc7\xf4NC\\\xa9\x1e\xac\xdd\xcc\xe5uuj\xb7\x0f\xea@\x89\x7f\rs\xc7=p5\x98\x8dg\xf5\x90l\x04\xc6_\xab\r \x98\xd9\xa2\x84\xb12d\x86\r\xe6\a\"#v\xa3}\x82(\xf2\xce\xd9\x14\xaf\x92\x16\xaa\xf9M\xfa\xc9/;Y\x89\xca\x12\xa0o\x8a\xdc\xa8\bP!\xd4\xc8g\x1c\xbd\xff\x90M\x96C~\'r\xe1kFRe\x9cf\xcc\xd7\x1e\xc9\xfb\xf5\n]\x1a;!\xa9\x14\xd6\x05\x13`\f\x1aa\xed\xfa\xcc\xda\t\xe5C\xe6\x8d8\xb2\x17N\xec\x86:wu\xe5\xc3\xddVn\xc3$\xbc^\xb4\xac\b\xca\x16\x02\xcb\xbb>\x04\xf3.>3\xe4\xce\xaf\xb2\x1c\xef\x86\xdb\x03PD\xaf\x7f\xe3\x88\xd71=\x7f\xe5\xe4\x8fls', 0x2, 0x0)
getpid()
write$cgroup_pid(r7, &(0x7f00000036c0), 0x12)
open(0x0, 0x141042, 0x0)
getresgid(&(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880))
lstat(&(0x7f00000018c0)='./bus\x00', &(0x7f0000001900))
getgid()
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r8, 0x4028af11, &(0x7f0000000040))
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r9, 0xaf01, 0x0)
r10 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r10, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r10, 0x4028af11, 0x0)
r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r11, 0x4028af11, &(0x7f0000000040))
r12 = getpid()
sched_setscheduler(r12, 0x5, &(0x7f0000000380))
getpgid(r12)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r13 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r13, 0xaf01, 0x0)
r14 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r14, 0xaf01, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setuid(0x0)
r15 = socket$inet6(0xa, 0x0, 0x0)
close(r15)
r16 = getpid()
getresgid(&(0x7f0000001800)=<r17=>0x0, &(0x7f0000001840), &(0x7f0000001880))
r18 = getgid()
r19 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r19, 0xaf01, 0x0)
r20 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r20, 0xaf01, 0x0)
r21 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r21, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r21, 0x4028af11, 0x0)
r22 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r22, 0xaf01, 0x0)
r23 = getpid()
sched_setscheduler(r23, 0x5, &(0x7f0000000380))
r24 = getpgid(r23)
r25 = getegid()
r26 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r26, 0xaf01, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
r27 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r27, 0x4028af11, &(0x7f0000000040))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f0000000500)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000580)="662e72720f2a216d54aa17e89c0d449032e652373ac558b7367ab3499e1527e088ccfe6e9e9da1cb7ef6af600fcc160d65b8cb23fcb40c603f34c8deab3dcea55f929ea931bc", 0x46}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYRES32=r18, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r15, @ANYRES32=r21, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r22, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r24, @ANYRES32, @ANYRES32=r25, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000240000000000000001000000010000", @ANYRES32, @ANYRES32=r26, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000", @ANYRES32, @ANYRES32, @ANYRES32=r27, @ANYBLOB='\x00\x00\x00\x00'], 0xeb, 0x2008044}], 0x3, 0x4c010)
umount2(&(0x7f0000000040)='.\x00', 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x7f12856cac1ab1af, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)

13:48:11 executing program 0:
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000540)=0x81, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1})
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x4018)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x2}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:48:12 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1')
r3 = syz_open_dev$rtc(0x0, 0x0, 0x42040)
dup3(r0, r3, 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0)
ftruncate(r4, 0x200004)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

13:48:12 executing program 5:
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
chroot(0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
symlink(0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x78080, 0x0)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0)
mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="59568e3c344e0000f5ee8cf17b538a01ce2c826f2c3299c98cd5"], 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
pwritev(r0, &(0x7f0000000180), 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0xfffffffa, 0xd8, &(0x7f0000000580)=""/216, 0x0, 0x4, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x6, 0x3f, 0xaa}, 0x10}, 0x70)
syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x400000)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_open_dev$dri(&(0x7f0000000700)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x101100)
socket$kcm(0x29, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
socket(0xa, 0x80001, 0x0)
setuid(0x0)
r6 = socket$inet6(0xa, 0x0, 0x0)
close(r6)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002ec0)='/proc/sys/net/ipv4/\x00\x10/nc_version\x00\x00\x00\x83\xef\xdd&\xd4\xea\xe3T\xc7\xf4NC\\\xa9\x1e\xac\xdd\xcc\xe5uuj\xb7\x0f\xea@\x89\x7f\rs\xc7=p5\x98\x8dg\xf5\x90l\x04\xc6_\xab\r \x98\xd9\xa2\x84\xb12d\x86\r\xe6\a\"#v\xa3}\x82(\xf2\xce\xd9\x14\xaf\x92\x16\xaa\xf9M\xfa\xc9/;Y\x89\xca\x12\xa0o\x8a\xdc\xa8\bP!\xd4\xc8g\x1c\xbd\xff\x90M\x96C~\'r\xe1kFRe\x9cf\xcc\xd7\x1e\xc9\xfb\xf5\n]\x1a;!\xa9\x14\xd6\x05\x13`\f\x1aa\xed\xfa\xcc\xda\t\xe5C\xe6\x8d8\xb2\x17N\xec\x86:wu\xe5\xc3\xddVn\xc3$\xbc^\xb4\xac\b\xca\x16\x02\xcb\xbb>\x04\xf3.>3\xe4\xce\xaf\xb2\x1c\xef\x86\xdb\x03PD\xaf\x7f\xe3\x88\xd71=\x7f\xe5\xe4\x8fls', 0x2, 0x0)
getpid()
write$cgroup_pid(r7, &(0x7f00000036c0), 0x12)
open(0x0, 0x141042, 0x0)
getresgid(&(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880))
lstat(&(0x7f00000018c0)='./bus\x00', &(0x7f0000001900))
getgid()
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r8, 0x4028af11, &(0x7f0000000040))
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r9, 0xaf01, 0x0)
r10 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r10, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r10, 0x4028af11, 0x0)
r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r11, 0x4028af11, &(0x7f0000000040))
r12 = getpid()
sched_setscheduler(r12, 0x5, &(0x7f0000000380))
getpgid(r12)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r13 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r13, 0xaf01, 0x0)
r14 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r14, 0xaf01, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setuid(0x0)
r15 = socket$inet6(0xa, 0x0, 0x0)
close(r15)
r16 = getpid()
getresgid(&(0x7f0000001800)=<r17=>0x0, &(0x7f0000001840), &(0x7f0000001880))
r18 = getgid()
r19 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r19, 0xaf01, 0x0)
r20 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r20, 0xaf01, 0x0)
r21 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r21, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r21, 0x4028af11, 0x0)
r22 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r22, 0xaf01, 0x0)
r23 = getpid()
sched_setscheduler(r23, 0x5, &(0x7f0000000380))
r24 = getpgid(r23)
r25 = getegid()
r26 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r26, 0xaf01, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
r27 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r27, 0x4028af11, &(0x7f0000000040))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f0000000500)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000580)="662e72720f2a216d54aa17e89c0d449032e652373ac558b7367ab3499e1527e088ccfe6e9e9da1cb7ef6af600fcc160d65b8cb23fcb40c603f34c8deab3dcea55f929ea931bc", 0x46}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYRES32=r18, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r15, @ANYRES32=r21, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r22, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r24, @ANYRES32, @ANYRES32=r25, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000240000000000000001000000010000", @ANYRES32, @ANYRES32=r26, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000", @ANYRES32, @ANYRES32, @ANYRES32=r27, @ANYBLOB='\x00\x00\x00\x00'], 0xeb, 0x2008044}], 0x3, 0x4c010)
umount2(&(0x7f0000000040)='.\x00', 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x7f12856cac1ab1af, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)

[  595.447031][T15001] device nr0
 entered promiscuous mode
13:48:12 executing program 0:
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
chroot(0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
symlink(0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x78080, 0x0)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0)
mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="59568e3c344e0000f5ee8cf17b538a01ce2c826f2c3299c98cd5"], 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
pwritev(r0, &(0x7f0000000180), 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0xfffffffa, 0xd8, &(0x7f0000000580)=""/216, 0x0, 0x4, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x6, 0x3f, 0xaa}, 0x10}, 0x70)
syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x400000)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_open_dev$dri(&(0x7f0000000700)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x101100)
socket$kcm(0x29, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
socket(0xa, 0x80001, 0x0)
setuid(0x0)
r6 = socket$inet6(0xa, 0x0, 0x0)
close(r6)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002ec0)='/proc/sys/net/ipv4/\x00\x10/nc_version\x00\x00\x00\x83\xef\xdd&\xd4\xea\xe3T\xc7\xf4NC\\\xa9\x1e\xac\xdd\xcc\xe5uuj\xb7\x0f\xea@\x89\x7f\rs\xc7=p5\x98\x8dg\xf5\x90l\x04\xc6_\xab\r \x98\xd9\xa2\x84\xb12d\x86\r\xe6\a\"#v\xa3}\x82(\xf2\xce\xd9\x14\xaf\x92\x16\xaa\xf9M\xfa\xc9/;Y\x89\xca\x12\xa0o\x8a\xdc\xa8\bP!\xd4\xc8g\x1c\xbd\xff\x90M\x96C~\'r\xe1kFRe\x9cf\xcc\xd7\x1e\xc9\xfb\xf5\n]\x1a;!\xa9\x14\xd6\x05\x13`\f\x1aa\xed\xfa\xcc\xda\t\xe5C\xe6\x8d8\xb2\x17N\xec\x86:wu\xe5\xc3\xddVn\xc3$\xbc^\xb4\xac\b\xca\x16\x02\xcb\xbb>\x04\xf3.>3\xe4\xce\xaf\xb2\x1c\xef\x86\xdb\x03PD\xaf\x7f\xe3\x88\xd71=\x7f\xe5\xe4\x8fls', 0x2, 0x0)
getpid()
write$cgroup_pid(r7, &(0x7f00000036c0), 0x12)
open(0x0, 0x141042, 0x0)
getresgid(&(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880))
lstat(&(0x7f00000018c0)='./bus\x00', &(0x7f0000001900))
getgid()
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r8, 0x4028af11, &(0x7f0000000040))
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r9, 0xaf01, 0x0)
r10 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r10, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r10, 0x4028af11, 0x0)
r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r11, 0x4028af11, &(0x7f0000000040))
r12 = getpid()
sched_setscheduler(r12, 0x5, &(0x7f0000000380))
getpgid(r12)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r13 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r13, 0xaf01, 0x0)
r14 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r14, 0xaf01, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setuid(0x0)
r15 = socket$inet6(0xa, 0x0, 0x0)
close(r15)
r16 = getpid()
getresgid(&(0x7f0000001800)=<r17=>0x0, &(0x7f0000001840), &(0x7f0000001880))
r18 = getgid()
r19 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r19, 0xaf01, 0x0)
r20 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r20, 0xaf01, 0x0)
r21 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r21, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r21, 0x4028af11, 0x0)
r22 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r22, 0xaf01, 0x0)
r23 = getpid()
sched_setscheduler(r23, 0x5, &(0x7f0000000380))
r24 = getpgid(r23)
r25 = getegid()
r26 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r26, 0xaf01, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
r27 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r27, 0x4028af11, &(0x7f0000000040))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f0000000500)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000580)="662e72720f2a216d54aa17e89c0d449032e652373ac558b7367ab3499e1527e088ccfe6e9e9da1cb7ef6af600fcc160d65b8cb23fcb40c603f34c8deab3dcea55f929ea931bc", 0x46}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYRES32=r18, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r15, @ANYRES32=r21, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r22, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r24, @ANYRES32, @ANYRES32=r25, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000240000000000000001000000010000", @ANYRES32, @ANYRES32=r26, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000", @ANYRES32, @ANYRES32, @ANYRES32=r27, @ANYBLOB='\x00\x00\x00\x00'], 0xeb, 0x2008044}], 0x3, 0x4c010)
umount2(&(0x7f0000000040)='.\x00', 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x7f12856cac1ab1af, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)

13:48:13 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1')
r3 = syz_open_dev$rtc(0x0, 0x0, 0x42040)
dup3(r0, r3, 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0)
ftruncate(r4, 0x200004)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

[  596.706956][T15055] device nr0
 entered promiscuous mode
13:48:14 executing program 3:
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
chroot(0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
symlink(0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x78080, 0x0)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0)
mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="59568e3c344e0000f5ee8cf17b538a01ce2c826f2c3299c98cd5"], 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
pwritev(r0, &(0x7f0000000180), 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0xfffffffa, 0xd8, &(0x7f0000000580)=""/216, 0x0, 0x4, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x6, 0x3f, 0xaa}, 0x10}, 0x70)
syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x400000)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_open_dev$dri(&(0x7f0000000700)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x101100)
socket$kcm(0x29, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
socket(0xa, 0x80001, 0x0)
setuid(0x0)
r6 = socket$inet6(0xa, 0x0, 0x0)
close(r6)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002ec0)='/proc/sys/net/ipv4/\x00\x10/nc_version\x00\x00\x00\x83\xef\xdd&\xd4\xea\xe3T\xc7\xf4NC\\\xa9\x1e\xac\xdd\xcc\xe5uuj\xb7\x0f\xea@\x89\x7f\rs\xc7=p5\x98\x8dg\xf5\x90l\x04\xc6_\xab\r \x98\xd9\xa2\x84\xb12d\x86\r\xe6\a\"#v\xa3}\x82(\xf2\xce\xd9\x14\xaf\x92\x16\xaa\xf9M\xfa\xc9/;Y\x89\xca\x12\xa0o\x8a\xdc\xa8\bP!\xd4\xc8g\x1c\xbd\xff\x90M\x96C~\'r\xe1kFRe\x9cf\xcc\xd7\x1e\xc9\xfb\xf5\n]\x1a;!\xa9\x14\xd6\x05\x13`\f\x1aa\xed\xfa\xcc\xda\t\xe5C\xe6\x8d8\xb2\x17N\xec\x86:wu\xe5\xc3\xddVn\xc3$\xbc^\xb4\xac\b\xca\x16\x02\xcb\xbb>\x04\xf3.>3\xe4\xce\xaf\xb2\x1c\xef\x86\xdb\x03PD\xaf\x7f\xe3\x88\xd71=\x7f\xe5\xe4\x8fls', 0x2, 0x0)
getpid()
write$cgroup_pid(r7, &(0x7f00000036c0), 0x12)
open(0x0, 0x141042, 0x0)
getresgid(&(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880))
lstat(&(0x7f00000018c0)='./bus\x00', &(0x7f0000001900))
getgid()
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r8, 0x4028af11, &(0x7f0000000040))
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r9, 0xaf01, 0x0)
r10 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r10, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r10, 0x4028af11, 0x0)
r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r11, 0x4028af11, &(0x7f0000000040))
r12 = getpid()
sched_setscheduler(r12, 0x5, &(0x7f0000000380))
getpgid(r12)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r13 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r13, 0xaf01, 0x0)
r14 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r14, 0xaf01, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setuid(0x0)
r15 = socket$inet6(0xa, 0x0, 0x0)
close(r15)
r16 = getpid()
getresgid(&(0x7f0000001800)=<r17=>0x0, &(0x7f0000001840), &(0x7f0000001880))
r18 = getgid()
r19 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r19, 0xaf01, 0x0)
r20 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r20, 0xaf01, 0x0)
r21 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r21, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r21, 0x4028af11, 0x0)
r22 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r22, 0xaf01, 0x0)
r23 = getpid()
sched_setscheduler(r23, 0x5, &(0x7f0000000380))
r24 = getpgid(r23)
r25 = getegid()
r26 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r26, 0xaf01, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
r27 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r27, 0x4028af11, &(0x7f0000000040))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f0000000500)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000580)="662e72720f2a216d54aa17e89c0d449032e652373ac558b7367ab3499e1527e088ccfe6e9e9da1cb7ef6af600fcc160d65b8cb23fcb40c603f34c8deab3dcea55f929ea931bc", 0x46}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYRES32=r18, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r15, @ANYRES32=r21, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r22, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r24, @ANYRES32, @ANYRES32=r25, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000240000000000000001000000010000", @ANYRES32, @ANYRES32=r26, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000", @ANYRES32, @ANYRES32, @ANYRES32=r27, @ANYBLOB='\x00\x00\x00\x00'], 0xeb, 0x2008044}], 0x3, 0x4c010)
umount2(&(0x7f0000000040)='.\x00', 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x7f12856cac1ab1af, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)

13:48:14 executing program 1:
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
chroot(0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
symlink(0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x78080, 0x0)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0)
mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="59568e3c344e0000f5ee8cf17b538a01ce2c826f2c3299c98cd5"], 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
pwritev(r0, &(0x7f0000000180), 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0xfffffffa, 0xd8, &(0x7f0000000580)=""/216, 0x0, 0x4, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x6, 0x3f, 0xaa}, 0x10}, 0x70)
syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x400000)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_open_dev$dri(&(0x7f0000000700)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x101100)
socket$kcm(0x29, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
socket(0xa, 0x80001, 0x0)
setuid(0x0)
r6 = socket$inet6(0xa, 0x0, 0x0)
close(r6)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002ec0)='/proc/sys/net/ipv4/\x00\x10/nc_version\x00\x00\x00\x83\xef\xdd&\xd4\xea\xe3T\xc7\xf4NC\\\xa9\x1e\xac\xdd\xcc\xe5uuj\xb7\x0f\xea@\x89\x7f\rs\xc7=p5\x98\x8dg\xf5\x90l\x04\xc6_\xab\r \x98\xd9\xa2\x84\xb12d\x86\r\xe6\a\"#v\xa3}\x82(\xf2\xce\xd9\x14\xaf\x92\x16\xaa\xf9M\xfa\xc9/;Y\x89\xca\x12\xa0o\x8a\xdc\xa8\bP!\xd4\xc8g\x1c\xbd\xff\x90M\x96C~\'r\xe1kFRe\x9cf\xcc\xd7\x1e\xc9\xfb\xf5\n]\x1a;!\xa9\x14\xd6\x05\x13`\f\x1aa\xed\xfa\xcc\xda\t\xe5C\xe6\x8d8\xb2\x17N\xec\x86:wu\xe5\xc3\xddVn\xc3$\xbc^\xb4\xac\b\xca\x16\x02\xcb\xbb>\x04\xf3.>3\xe4\xce\xaf\xb2\x1c\xef\x86\xdb\x03PD\xaf\x7f\xe3\x88\xd71=\x7f\xe5\xe4\x8fls', 0x2, 0x0)
getpid()
write$cgroup_pid(r7, &(0x7f00000036c0), 0x12)
open(0x0, 0x141042, 0x0)
getresgid(&(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880))
lstat(&(0x7f00000018c0)='./bus\x00', &(0x7f0000001900))
getgid()
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r8, 0x4028af11, &(0x7f0000000040))
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r9, 0xaf01, 0x0)
r10 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r10, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r10, 0x4028af11, 0x0)
r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r11, 0x4028af11, &(0x7f0000000040))
r12 = getpid()
sched_setscheduler(r12, 0x5, &(0x7f0000000380))
getpgid(r12)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r13 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r13, 0xaf01, 0x0)
r14 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r14, 0xaf01, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setuid(0x0)
r15 = socket$inet6(0xa, 0x0, 0x0)
close(r15)
r16 = getpid()
getresgid(&(0x7f0000001800)=<r17=>0x0, &(0x7f0000001840), &(0x7f0000001880))
r18 = getgid()
r19 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r19, 0xaf01, 0x0)
r20 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r20, 0xaf01, 0x0)
r21 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r21, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r21, 0x4028af11, 0x0)
r22 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r22, 0xaf01, 0x0)
r23 = getpid()
sched_setscheduler(r23, 0x5, &(0x7f0000000380))
r24 = getpgid(r23)
r25 = getegid()
r26 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r26, 0xaf01, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
r27 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r27, 0x4028af11, &(0x7f0000000040))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f0000000500)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000580)="662e72720f2a216d54aa17e89c0d449032e652373ac558b7367ab3499e1527e088ccfe6e9e9da1cb7ef6af600fcc160d65b8cb23fcb40c603f34c8deab3dcea55f929ea931bc", 0x46}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYRES32=r18, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r15, @ANYRES32=r21, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r22, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r24, @ANYRES32, @ANYRES32=r25, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000240000000000000001000000010000", @ANYRES32, @ANYRES32=r26, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000", @ANYRES32, @ANYRES32, @ANYRES32=r27, @ANYBLOB='\x00\x00\x00\x00'], 0xeb, 0x2008044}], 0x3, 0x4c010)
umount2(&(0x7f0000000040)='.\x00', 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x7f12856cac1ab1af, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)

13:48:14 executing program 2:
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
chroot(0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
symlink(0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x78080, 0x0)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0)
mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="59568e3c344e0000f5ee8cf17b538a01ce2c826f2c3299c98cd5"], 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
pwritev(r0, &(0x7f0000000180), 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0xfffffffa, 0xd8, &(0x7f0000000580)=""/216, 0x0, 0x4, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x6, 0x3f, 0xaa}, 0x10}, 0x70)
syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x400000)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_open_dev$dri(&(0x7f0000000700)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x101100)
socket$kcm(0x29, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
socket(0xa, 0x80001, 0x0)
setuid(0x0)
r6 = socket$inet6(0xa, 0x0, 0x0)
close(r6)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002ec0)='/proc/sys/net/ipv4/\x00\x10/nc_version\x00\x00\x00\x83\xef\xdd&\xd4\xea\xe3T\xc7\xf4NC\\\xa9\x1e\xac\xdd\xcc\xe5uuj\xb7\x0f\xea@\x89\x7f\rs\xc7=p5\x98\x8dg\xf5\x90l\x04\xc6_\xab\r \x98\xd9\xa2\x84\xb12d\x86\r\xe6\a\"#v\xa3}\x82(\xf2\xce\xd9\x14\xaf\x92\x16\xaa\xf9M\xfa\xc9/;Y\x89\xca\x12\xa0o\x8a\xdc\xa8\bP!\xd4\xc8g\x1c\xbd\xff\x90M\x96C~\'r\xe1kFRe\x9cf\xcc\xd7\x1e\xc9\xfb\xf5\n]\x1a;!\xa9\x14\xd6\x05\x13`\f\x1aa\xed\xfa\xcc\xda\t\xe5C\xe6\x8d8\xb2\x17N\xec\x86:wu\xe5\xc3\xddVn\xc3$\xbc^\xb4\xac\b\xca\x16\x02\xcb\xbb>\x04\xf3.>3\xe4\xce\xaf\xb2\x1c\xef\x86\xdb\x03PD\xaf\x7f\xe3\x88\xd71=\x7f\xe5\xe4\x8fls', 0x2, 0x0)
getpid()
write$cgroup_pid(r7, &(0x7f00000036c0), 0x12)
open(0x0, 0x141042, 0x0)
getresgid(&(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880))
lstat(&(0x7f00000018c0)='./bus\x00', &(0x7f0000001900))
getgid()
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r8, 0x4028af11, &(0x7f0000000040))
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r9, 0xaf01, 0x0)
r10 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r10, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r10, 0x4028af11, 0x0)
r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r11, 0x4028af11, &(0x7f0000000040))
r12 = getpid()
sched_setscheduler(r12, 0x5, &(0x7f0000000380))
getpgid(r12)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r13 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r13, 0xaf01, 0x0)
r14 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r14, 0xaf01, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setuid(0x0)
r15 = socket$inet6(0xa, 0x0, 0x0)
close(r15)
r16 = getpid()
getresgid(&(0x7f0000001800)=<r17=>0x0, &(0x7f0000001840), &(0x7f0000001880))
r18 = getgid()
r19 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r19, 0xaf01, 0x0)
r20 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r20, 0xaf01, 0x0)
r21 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r21, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r21, 0x4028af11, 0x0)
r22 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r22, 0xaf01, 0x0)
r23 = getpid()
sched_setscheduler(r23, 0x5, &(0x7f0000000380))
r24 = getpgid(r23)
r25 = getegid()
r26 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r26, 0xaf01, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
r27 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r27, 0x4028af11, &(0x7f0000000040))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f0000000500)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000580)="662e72720f2a216d54aa17e89c0d449032e652373ac558b7367ab3499e1527e088ccfe6e9e9da1cb7ef6af600fcc160d65b8cb23fcb40c603f34c8deab3dcea55f929ea931bc", 0x46}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYRES32=r18, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r15, @ANYRES32=r21, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r22, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r24, @ANYRES32, @ANYRES32=r25, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000240000000000000001000000010000", @ANYRES32, @ANYRES32=r26, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000", @ANYRES32, @ANYRES32, @ANYRES32=r27, @ANYBLOB='\x00\x00\x00\x00'], 0xeb, 0x2008044}], 0x3, 0x4c010)
umount2(&(0x7f0000000040)='.\x00', 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x7f12856cac1ab1af, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)

13:48:14 executing program 0:
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
chroot(0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
symlink(0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x78080, 0x0)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0)
mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="59568e3c344e0000f5ee8cf17b538a01ce2c826f2c3299c98cd5"], 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
pwritev(r0, &(0x7f0000000180), 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0xfffffffa, 0xd8, &(0x7f0000000580)=""/216, 0x0, 0x4, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x6, 0x3f, 0xaa}, 0x10}, 0x70)
syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x400000)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_open_dev$dri(&(0x7f0000000700)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x101100)
socket$kcm(0x29, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
socket(0xa, 0x80001, 0x0)
setuid(0x0)
r6 = socket$inet6(0xa, 0x0, 0x0)
close(r6)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002ec0)='/proc/sys/net/ipv4/\x00\x10/nc_version\x00\x00\x00\x83\xef\xdd&\xd4\xea\xe3T\xc7\xf4NC\\\xa9\x1e\xac\xdd\xcc\xe5uuj\xb7\x0f\xea@\x89\x7f\rs\xc7=p5\x98\x8dg\xf5\x90l\x04\xc6_\xab\r \x98\xd9\xa2\x84\xb12d\x86\r\xe6\a\"#v\xa3}\x82(\xf2\xce\xd9\x14\xaf\x92\x16\xaa\xf9M\xfa\xc9/;Y\x89\xca\x12\xa0o\x8a\xdc\xa8\bP!\xd4\xc8g\x1c\xbd\xff\x90M\x96C~\'r\xe1kFRe\x9cf\xcc\xd7\x1e\xc9\xfb\xf5\n]\x1a;!\xa9\x14\xd6\x05\x13`\f\x1aa\xed\xfa\xcc\xda\t\xe5C\xe6\x8d8\xb2\x17N\xec\x86:wu\xe5\xc3\xddVn\xc3$\xbc^\xb4\xac\b\xca\x16\x02\xcb\xbb>\x04\xf3.>3\xe4\xce\xaf\xb2\x1c\xef\x86\xdb\x03PD\xaf\x7f\xe3\x88\xd71=\x7f\xe5\xe4\x8fls', 0x2, 0x0)
getpid()
write$cgroup_pid(r7, &(0x7f00000036c0), 0x12)
open(0x0, 0x141042, 0x0)
getresgid(&(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880))
lstat(&(0x7f00000018c0)='./bus\x00', &(0x7f0000001900))
getgid()
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r8, 0x4028af11, &(0x7f0000000040))
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r9, 0xaf01, 0x0)
r10 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r10, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r10, 0x4028af11, 0x0)
r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r11, 0x4028af11, &(0x7f0000000040))
r12 = getpid()
sched_setscheduler(r12, 0x5, &(0x7f0000000380))
getpgid(r12)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r13 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r13, 0xaf01, 0x0)
r14 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r14, 0xaf01, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setuid(0x0)
r15 = socket$inet6(0xa, 0x0, 0x0)
close(r15)
r16 = getpid()
getresgid(&(0x7f0000001800)=<r17=>0x0, &(0x7f0000001840), &(0x7f0000001880))
r18 = getgid()
r19 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r19, 0xaf01, 0x0)
r20 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r20, 0xaf01, 0x0)
r21 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r21, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r21, 0x4028af11, 0x0)
r22 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r22, 0xaf01, 0x0)
r23 = getpid()
sched_setscheduler(r23, 0x5, &(0x7f0000000380))
r24 = getpgid(r23)
r25 = getegid()
r26 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r26, 0xaf01, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
r27 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r27, 0x4028af11, &(0x7f0000000040))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f0000000500)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000580)="662e72720f2a216d54aa17e89c0d449032e652373ac558b7367ab3499e1527e088ccfe6e9e9da1cb7ef6af600fcc160d65b8cb23fcb40c603f34c8deab3dcea55f929ea931bc", 0x46}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYRES32=r18, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r15, @ANYRES32=r21, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r22, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r24, @ANYRES32, @ANYRES32=r25, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000240000000000000001000000010000", @ANYRES32, @ANYRES32=r26, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000", @ANYRES32, @ANYRES32, @ANYRES32=r27, @ANYBLOB='\x00\x00\x00\x00'], 0xeb, 0x2008044}], 0x3, 0x4c010)
umount2(&(0x7f0000000040)='.\x00', 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x7f12856cac1ab1af, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)

13:48:14 executing program 4:
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
chroot(0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
symlink(0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x78080, 0x0)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0)
mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="59568e3c344e0000f5ee8cf17b538a01ce2c826f2c3299c98cd5"], 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
pwritev(r0, &(0x7f0000000180), 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0xfffffffa, 0xd8, &(0x7f0000000580)=""/216, 0x0, 0x4, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x6, 0x3f, 0xaa}, 0x10}, 0x70)
syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x400000)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_open_dev$dri(&(0x7f0000000700)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x101100)
socket$kcm(0x29, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
socket(0xa, 0x80001, 0x0)
setuid(0x0)
r6 = socket$inet6(0xa, 0x0, 0x0)
close(r6)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002ec0)='/proc/sys/net/ipv4/\x00\x10/nc_version\x00\x00\x00\x83\xef\xdd&\xd4\xea\xe3T\xc7\xf4NC\\\xa9\x1e\xac\xdd\xcc\xe5uuj\xb7\x0f\xea@\x89\x7f\rs\xc7=p5\x98\x8dg\xf5\x90l\x04\xc6_\xab\r \x98\xd9\xa2\x84\xb12d\x86\r\xe6\a\"#v\xa3}\x82(\xf2\xce\xd9\x14\xaf\x92\x16\xaa\xf9M\xfa\xc9/;Y\x89\xca\x12\xa0o\x8a\xdc\xa8\bP!\xd4\xc8g\x1c\xbd\xff\x90M\x96C~\'r\xe1kFRe\x9cf\xcc\xd7\x1e\xc9\xfb\xf5\n]\x1a;!\xa9\x14\xd6\x05\x13`\f\x1aa\xed\xfa\xcc\xda\t\xe5C\xe6\x8d8\xb2\x17N\xec\x86:wu\xe5\xc3\xddVn\xc3$\xbc^\xb4\xac\b\xca\x16\x02\xcb\xbb>\x04\xf3.>3\xe4\xce\xaf\xb2\x1c\xef\x86\xdb\x03PD\xaf\x7f\xe3\x88\xd71=\x7f\xe5\xe4\x8fls', 0x2, 0x0)
getpid()
write$cgroup_pid(r7, &(0x7f00000036c0), 0x12)
open(0x0, 0x141042, 0x0)
getresgid(&(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880))
lstat(&(0x7f00000018c0)='./bus\x00', &(0x7f0000001900))
getgid()
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r8, 0x4028af11, &(0x7f0000000040))
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r9, 0xaf01, 0x0)
r10 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r10, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r10, 0x4028af11, 0x0)
r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r11, 0x4028af11, &(0x7f0000000040))
r12 = getpid()
sched_setscheduler(r12, 0x5, &(0x7f0000000380))
getpgid(r12)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r13 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r13, 0xaf01, 0x0)
r14 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r14, 0xaf01, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setuid(0x0)
r15 = socket$inet6(0xa, 0x0, 0x0)
close(r15)
r16 = getpid()
getresgid(&(0x7f0000001800)=<r17=>0x0, &(0x7f0000001840), &(0x7f0000001880))
r18 = getgid()
r19 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r19, 0xaf01, 0x0)
r20 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r20, 0xaf01, 0x0)
r21 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r21, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r21, 0x4028af11, 0x0)
r22 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r22, 0xaf01, 0x0)
r23 = getpid()
sched_setscheduler(r23, 0x5, &(0x7f0000000380))
r24 = getpgid(r23)
r25 = getegid()
r26 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r26, 0xaf01, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
r27 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r27, 0x4028af11, &(0x7f0000000040))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f0000000500)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000580)="662e72720f2a216d54aa17e89c0d449032e652373ac558b7367ab3499e1527e088ccfe6e9e9da1cb7ef6af600fcc160d65b8cb23fcb40c603f34c8deab3dcea55f929ea931bc", 0x46}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYRES32=r18, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r15, @ANYRES32=r21, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r22, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r24, @ANYRES32, @ANYRES32=r25, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000240000000000000001000000010000", @ANYRES32, @ANYRES32=r26, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000", @ANYRES32, @ANYRES32, @ANYRES32=r27, @ANYBLOB='\x00\x00\x00\x00'], 0xeb, 0x2008044}], 0x3, 0x4c010)
umount2(&(0x7f0000000040)='.\x00', 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x7f12856cac1ab1af, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)

13:48:14 executing program 5:
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
chroot(0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
symlink(0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x78080, 0x0)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0)
mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="59568e3c344e0000f5ee8cf17b538a01ce2c826f2c3299c98cd5"], 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
pwritev(r0, &(0x7f0000000180), 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0xfffffffa, 0xd8, &(0x7f0000000580)=""/216, 0x0, 0x4, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x6, 0x3f, 0xaa}, 0x10}, 0x70)
syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x400000)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_open_dev$dri(&(0x7f0000000700)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x101100)
socket$kcm(0x29, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
socket(0xa, 0x80001, 0x0)
setuid(0x0)
r6 = socket$inet6(0xa, 0x0, 0x0)
close(r6)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002ec0)='/proc/sys/net/ipv4/\x00\x10/nc_version\x00\x00\x00\x83\xef\xdd&\xd4\xea\xe3T\xc7\xf4NC\\\xa9\x1e\xac\xdd\xcc\xe5uuj\xb7\x0f\xea@\x89\x7f\rs\xc7=p5\x98\x8dg\xf5\x90l\x04\xc6_\xab\r \x98\xd9\xa2\x84\xb12d\x86\r\xe6\a\"#v\xa3}\x82(\xf2\xce\xd9\x14\xaf\x92\x16\xaa\xf9M\xfa\xc9/;Y\x89\xca\x12\xa0o\x8a\xdc\xa8\bP!\xd4\xc8g\x1c\xbd\xff\x90M\x96C~\'r\xe1kFRe\x9cf\xcc\xd7\x1e\xc9\xfb\xf5\n]\x1a;!\xa9\x14\xd6\x05\x13`\f\x1aa\xed\xfa\xcc\xda\t\xe5C\xe6\x8d8\xb2\x17N\xec\x86:wu\xe5\xc3\xddVn\xc3$\xbc^\xb4\xac\b\xca\x16\x02\xcb\xbb>\x04\xf3.>3\xe4\xce\xaf\xb2\x1c\xef\x86\xdb\x03PD\xaf\x7f\xe3\x88\xd71=\x7f\xe5\xe4\x8fls', 0x2, 0x0)
getpid()
write$cgroup_pid(r7, &(0x7f00000036c0), 0x12)
open(0x0, 0x141042, 0x0)
getresgid(&(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880))
lstat(&(0x7f00000018c0)='./bus\x00', &(0x7f0000001900))
getgid()
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r8, 0x4028af11, &(0x7f0000000040))
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r9, 0xaf01, 0x0)
r10 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r10, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r10, 0x4028af11, 0x0)
r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r11, 0x4028af11, &(0x7f0000000040))
r12 = getpid()
sched_setscheduler(r12, 0x5, &(0x7f0000000380))
getpgid(r12)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r13 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r13, 0xaf01, 0x0)
r14 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r14, 0xaf01, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setuid(0x0)
r15 = socket$inet6(0xa, 0x0, 0x0)
close(r15)
r16 = getpid()
getresgid(&(0x7f0000001800)=<r17=>0x0, &(0x7f0000001840), &(0x7f0000001880))
r18 = getgid()
r19 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r19, 0xaf01, 0x0)
r20 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r20, 0xaf01, 0x0)
r21 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r21, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r21, 0x4028af11, 0x0)
r22 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r22, 0xaf01, 0x0)
r23 = getpid()
sched_setscheduler(r23, 0x5, &(0x7f0000000380))
r24 = getpgid(r23)
r25 = getegid()
r26 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r26, 0xaf01, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
r27 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r27, 0x4028af11, &(0x7f0000000040))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f0000000500)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000580)="662e72720f2a216d54aa17e89c0d449032e652373ac558b7367ab3499e1527e088ccfe6e9e9da1cb7ef6af600fcc160d65b8cb23fcb40c603f34c8deab3dcea55f929ea931bc", 0x46}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYRES32=r18, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r15, @ANYRES32=r21, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r22, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r24, @ANYRES32, @ANYRES32=r25, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000240000000000000001000000010000", @ANYRES32, @ANYRES32=r26, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000", @ANYRES32, @ANYRES32, @ANYRES32=r27, @ANYBLOB='\x00\x00\x00\x00'], 0xeb, 0x2008044}], 0x3, 0x4c010)
umount2(&(0x7f0000000040)='.\x00', 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x7f12856cac1ab1af, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)

13:48:16 executing program 1:
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
chroot(0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
symlink(0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x78080, 0x0)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0)
mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="59568e3c344e0000f5ee8cf17b538a01ce2c826f2c3299c98cd5"], 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
pwritev(r0, &(0x7f0000000180), 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0xfffffffa, 0xd8, &(0x7f0000000580)=""/216, 0x0, 0x4, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x6, 0x3f, 0xaa}, 0x10}, 0x70)
syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x400000)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_open_dev$dri(&(0x7f0000000700)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x101100)
socket$kcm(0x29, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
socket(0xa, 0x80001, 0x0)
setuid(0x0)
r6 = socket$inet6(0xa, 0x0, 0x0)
close(r6)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002ec0)='/proc/sys/net/ipv4/\x00\x10/nc_version\x00\x00\x00\x83\xef\xdd&\xd4\xea\xe3T\xc7\xf4NC\\\xa9\x1e\xac\xdd\xcc\xe5uuj\xb7\x0f\xea@\x89\x7f\rs\xc7=p5\x98\x8dg\xf5\x90l\x04\xc6_\xab\r \x98\xd9\xa2\x84\xb12d\x86\r\xe6\a\"#v\xa3}\x82(\xf2\xce\xd9\x14\xaf\x92\x16\xaa\xf9M\xfa\xc9/;Y\x89\xca\x12\xa0o\x8a\xdc\xa8\bP!\xd4\xc8g\x1c\xbd\xff\x90M\x96C~\'r\xe1kFRe\x9cf\xcc\xd7\x1e\xc9\xfb\xf5\n]\x1a;!\xa9\x14\xd6\x05\x13`\f\x1aa\xed\xfa\xcc\xda\t\xe5C\xe6\x8d8\xb2\x17N\xec\x86:wu\xe5\xc3\xddVn\xc3$\xbc^\xb4\xac\b\xca\x16\x02\xcb\xbb>\x04\xf3.>3\xe4\xce\xaf\xb2\x1c\xef\x86\xdb\x03PD\xaf\x7f\xe3\x88\xd71=\x7f\xe5\xe4\x8fls', 0x2, 0x0)
getpid()
write$cgroup_pid(r7, &(0x7f00000036c0), 0x12)
open(0x0, 0x141042, 0x0)
getresgid(&(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880))
lstat(&(0x7f00000018c0)='./bus\x00', &(0x7f0000001900))
getgid()
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r8, 0x4028af11, &(0x7f0000000040))
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r9, 0xaf01, 0x0)
r10 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r10, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r10, 0x4028af11, 0x0)
r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r11, 0x4028af11, &(0x7f0000000040))
r12 = getpid()
sched_setscheduler(r12, 0x5, &(0x7f0000000380))
getpgid(r12)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r13 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r13, 0xaf01, 0x0)
r14 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r14, 0xaf01, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setuid(0x0)
r15 = socket$inet6(0xa, 0x0, 0x0)
close(r15)
r16 = getpid()
getresgid(&(0x7f0000001800)=<r17=>0x0, &(0x7f0000001840), &(0x7f0000001880))
r18 = getgid()
r19 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r19, 0xaf01, 0x0)
r20 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r20, 0xaf01, 0x0)
r21 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r21, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r21, 0x4028af11, 0x0)
r22 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r22, 0xaf01, 0x0)
r23 = getpid()
sched_setscheduler(r23, 0x5, &(0x7f0000000380))
r24 = getpgid(r23)
r25 = getegid()
r26 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r26, 0xaf01, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
r27 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r27, 0x4028af11, &(0x7f0000000040))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f0000000500)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000580)="662e72720f2a216d54aa17e89c0d449032e652373ac558b7367ab3499e1527e088ccfe6e9e9da1cb7ef6af600fcc160d65b8cb23fcb40c603f34c8deab3dcea55f929ea931bc", 0x46}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYRES32=r18, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r15, @ANYRES32=r21, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r22, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r24, @ANYRES32, @ANYRES32=r25, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000240000000000000001000000010000", @ANYRES32, @ANYRES32=r26, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000", @ANYRES32, @ANYRES32, @ANYRES32=r27, @ANYBLOB='\x00\x00\x00\x00'], 0xeb, 0x2008044}], 0x3, 0x4c010)
umount2(&(0x7f0000000040)='.\x00', 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x7f12856cac1ab1af, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)

13:48:16 executing program 0:
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
chroot(0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
symlink(0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x78080, 0x0)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0)
mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="59568e3c344e0000f5ee8cf17b538a01ce2c826f2c3299c98cd5"], 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
pwritev(r0, &(0x7f0000000180), 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0xfffffffa, 0xd8, &(0x7f0000000580)=""/216, 0x0, 0x4, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x6, 0x3f, 0xaa}, 0x10}, 0x70)
syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x400000)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_open_dev$dri(&(0x7f0000000700)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x101100)
socket$kcm(0x29, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
socket(0xa, 0x80001, 0x0)
setuid(0x0)
r6 = socket$inet6(0xa, 0x0, 0x0)
close(r6)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002ec0)='/proc/sys/net/ipv4/\x00\x10/nc_version\x00\x00\x00\x83\xef\xdd&\xd4\xea\xe3T\xc7\xf4NC\\\xa9\x1e\xac\xdd\xcc\xe5uuj\xb7\x0f\xea@\x89\x7f\rs\xc7=p5\x98\x8dg\xf5\x90l\x04\xc6_\xab\r \x98\xd9\xa2\x84\xb12d\x86\r\xe6\a\"#v\xa3}\x82(\xf2\xce\xd9\x14\xaf\x92\x16\xaa\xf9M\xfa\xc9/;Y\x89\xca\x12\xa0o\x8a\xdc\xa8\bP!\xd4\xc8g\x1c\xbd\xff\x90M\x96C~\'r\xe1kFRe\x9cf\xcc\xd7\x1e\xc9\xfb\xf5\n]\x1a;!\xa9\x14\xd6\x05\x13`\f\x1aa\xed\xfa\xcc\xda\t\xe5C\xe6\x8d8\xb2\x17N\xec\x86:wu\xe5\xc3\xddVn\xc3$\xbc^\xb4\xac\b\xca\x16\x02\xcb\xbb>\x04\xf3.>3\xe4\xce\xaf\xb2\x1c\xef\x86\xdb\x03PD\xaf\x7f\xe3\x88\xd71=\x7f\xe5\xe4\x8fls', 0x2, 0x0)
getpid()
write$cgroup_pid(r7, &(0x7f00000036c0), 0x12)
open(0x0, 0x141042, 0x0)
getresgid(&(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880))
lstat(&(0x7f00000018c0)='./bus\x00', &(0x7f0000001900))
getgid()
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r8, 0x4028af11, &(0x7f0000000040))
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r9, 0xaf01, 0x0)
r10 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r10, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r10, 0x4028af11, 0x0)
r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r11, 0x4028af11, &(0x7f0000000040))
r12 = getpid()
sched_setscheduler(r12, 0x5, &(0x7f0000000380))
getpgid(r12)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r13 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r13, 0xaf01, 0x0)
r14 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r14, 0xaf01, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setuid(0x0)
r15 = socket$inet6(0xa, 0x0, 0x0)
close(r15)
r16 = getpid()
getresgid(&(0x7f0000001800)=<r17=>0x0, &(0x7f0000001840), &(0x7f0000001880))
r18 = getgid()
r19 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r19, 0xaf01, 0x0)
r20 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r20, 0xaf01, 0x0)
r21 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r21, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r21, 0x4028af11, 0x0)
r22 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r22, 0xaf01, 0x0)
r23 = getpid()
sched_setscheduler(r23, 0x5, &(0x7f0000000380))
r24 = getpgid(r23)
r25 = getegid()
r26 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r26, 0xaf01, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
r27 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r27, 0x4028af11, &(0x7f0000000040))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f0000000500)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000580)="662e72720f2a216d54aa17e89c0d449032e652373ac558b7367ab3499e1527e088ccfe6e9e9da1cb7ef6af600fcc160d65b8cb23fcb40c603f34c8deab3dcea55f929ea931bc", 0x46}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYRES32=r18, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r15, @ANYRES32=r21, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r22, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r24, @ANYRES32, @ANYRES32=r25, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000240000000000000001000000010000", @ANYRES32, @ANYRES32=r26, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000", @ANYRES32, @ANYRES32, @ANYRES32=r27, @ANYBLOB='\x00\x00\x00\x00'], 0xeb, 0x2008044}], 0x3, 0x4c010)
umount2(&(0x7f0000000040)='.\x00', 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x7f12856cac1ab1af, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)

13:48:16 executing program 2:
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
chroot(0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
symlink(0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x78080, 0x0)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0)
mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="59568e3c344e0000f5ee8cf17b538a01ce2c826f2c3299c98cd5"], 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
pwritev(r0, &(0x7f0000000180), 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0xfffffffa, 0xd8, &(0x7f0000000580)=""/216, 0x0, 0x4, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x6, 0x3f, 0xaa}, 0x10}, 0x70)
syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x400000)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_open_dev$dri(&(0x7f0000000700)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x101100)
socket$kcm(0x29, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
socket(0xa, 0x80001, 0x0)
setuid(0x0)
r6 = socket$inet6(0xa, 0x0, 0x0)
close(r6)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002ec0)='/proc/sys/net/ipv4/\x00\x10/nc_version\x00\x00\x00\x83\xef\xdd&\xd4\xea\xe3T\xc7\xf4NC\\\xa9\x1e\xac\xdd\xcc\xe5uuj\xb7\x0f\xea@\x89\x7f\rs\xc7=p5\x98\x8dg\xf5\x90l\x04\xc6_\xab\r \x98\xd9\xa2\x84\xb12d\x86\r\xe6\a\"#v\xa3}\x82(\xf2\xce\xd9\x14\xaf\x92\x16\xaa\xf9M\xfa\xc9/;Y\x89\xca\x12\xa0o\x8a\xdc\xa8\bP!\xd4\xc8g\x1c\xbd\xff\x90M\x96C~\'r\xe1kFRe\x9cf\xcc\xd7\x1e\xc9\xfb\xf5\n]\x1a;!\xa9\x14\xd6\x05\x13`\f\x1aa\xed\xfa\xcc\xda\t\xe5C\xe6\x8d8\xb2\x17N\xec\x86:wu\xe5\xc3\xddVn\xc3$\xbc^\xb4\xac\b\xca\x16\x02\xcb\xbb>\x04\xf3.>3\xe4\xce\xaf\xb2\x1c\xef\x86\xdb\x03PD\xaf\x7f\xe3\x88\xd71=\x7f\xe5\xe4\x8fls', 0x2, 0x0)
getpid()
write$cgroup_pid(r7, &(0x7f00000036c0), 0x12)
open(0x0, 0x141042, 0x0)
getresgid(&(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880))
lstat(&(0x7f00000018c0)='./bus\x00', &(0x7f0000001900))
getgid()
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r8, 0x4028af11, &(0x7f0000000040))
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r9, 0xaf01, 0x0)
r10 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r10, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r10, 0x4028af11, 0x0)
r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r11, 0x4028af11, &(0x7f0000000040))
r12 = getpid()
sched_setscheduler(r12, 0x5, &(0x7f0000000380))
getpgid(r12)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r13 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r13, 0xaf01, 0x0)
r14 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r14, 0xaf01, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setuid(0x0)
r15 = socket$inet6(0xa, 0x0, 0x0)
close(r15)
r16 = getpid()
getresgid(&(0x7f0000001800)=<r17=>0x0, &(0x7f0000001840), &(0x7f0000001880))
r18 = getgid()
r19 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r19, 0xaf01, 0x0)
r20 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r20, 0xaf01, 0x0)
r21 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r21, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r21, 0x4028af11, 0x0)
r22 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r22, 0xaf01, 0x0)
r23 = getpid()
sched_setscheduler(r23, 0x5, &(0x7f0000000380))
r24 = getpgid(r23)
r25 = getegid()
r26 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r26, 0xaf01, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
r27 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r27, 0x4028af11, &(0x7f0000000040))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f0000000500)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000580)="662e72720f2a216d54aa17e89c0d449032e652373ac558b7367ab3499e1527e088ccfe6e9e9da1cb7ef6af600fcc160d65b8cb23fcb40c603f34c8deab3dcea55f929ea931bc", 0x46}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYRES32=r18, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r15, @ANYRES32=r21, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r22, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r24, @ANYRES32, @ANYRES32=r25, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000240000000000000001000000010000", @ANYRES32, @ANYRES32=r26, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000", @ANYRES32, @ANYRES32, @ANYRES32=r27, @ANYBLOB='\x00\x00\x00\x00'], 0xeb, 0x2008044}], 0x3, 0x4c010)
umount2(&(0x7f0000000040)='.\x00', 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x7f12856cac1ab1af, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)

13:48:16 executing program 3:
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
chroot(0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
symlink(0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x78080, 0x0)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0)
mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="59568e3c344e0000f5ee8cf17b538a01ce2c826f2c3299c98cd5"], 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
pwritev(r0, &(0x7f0000000180), 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0xfffffffa, 0xd8, &(0x7f0000000580)=""/216, 0x0, 0x4, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x6, 0x3f, 0xaa}, 0x10}, 0x70)
syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x400000)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_open_dev$dri(&(0x7f0000000700)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x101100)
socket$kcm(0x29, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
socket(0xa, 0x80001, 0x0)
setuid(0x0)
r6 = socket$inet6(0xa, 0x0, 0x0)
close(r6)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002ec0)='/proc/sys/net/ipv4/\x00\x10/nc_version\x00\x00\x00\x83\xef\xdd&\xd4\xea\xe3T\xc7\xf4NC\\\xa9\x1e\xac\xdd\xcc\xe5uuj\xb7\x0f\xea@\x89\x7f\rs\xc7=p5\x98\x8dg\xf5\x90l\x04\xc6_\xab\r \x98\xd9\xa2\x84\xb12d\x86\r\xe6\a\"#v\xa3}\x82(\xf2\xce\xd9\x14\xaf\x92\x16\xaa\xf9M\xfa\xc9/;Y\x89\xca\x12\xa0o\x8a\xdc\xa8\bP!\xd4\xc8g\x1c\xbd\xff\x90M\x96C~\'r\xe1kFRe\x9cf\xcc\xd7\x1e\xc9\xfb\xf5\n]\x1a;!\xa9\x14\xd6\x05\x13`\f\x1aa\xed\xfa\xcc\xda\t\xe5C\xe6\x8d8\xb2\x17N\xec\x86:wu\xe5\xc3\xddVn\xc3$\xbc^\xb4\xac\b\xca\x16\x02\xcb\xbb>\x04\xf3.>3\xe4\xce\xaf\xb2\x1c\xef\x86\xdb\x03PD\xaf\x7f\xe3\x88\xd71=\x7f\xe5\xe4\x8fls', 0x2, 0x0)
getpid()
write$cgroup_pid(r7, &(0x7f00000036c0), 0x12)
open(0x0, 0x141042, 0x0)
getresgid(&(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880))
lstat(&(0x7f00000018c0)='./bus\x00', &(0x7f0000001900))
getgid()
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r8, 0x4028af11, &(0x7f0000000040))
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r9, 0xaf01, 0x0)
r10 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r10, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r10, 0x4028af11, 0x0)
r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r11, 0x4028af11, &(0x7f0000000040))
r12 = getpid()
sched_setscheduler(r12, 0x5, &(0x7f0000000380))
getpgid(r12)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r13 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r13, 0xaf01, 0x0)
r14 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r14, 0xaf01, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setuid(0x0)
r15 = socket$inet6(0xa, 0x0, 0x0)
close(r15)
r16 = getpid()
getresgid(&(0x7f0000001800)=<r17=>0x0, &(0x7f0000001840), &(0x7f0000001880))
r18 = getgid()
r19 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r19, 0xaf01, 0x0)
r20 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r20, 0xaf01, 0x0)
r21 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r21, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r21, 0x4028af11, 0x0)
r22 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r22, 0xaf01, 0x0)
r23 = getpid()
sched_setscheduler(r23, 0x5, &(0x7f0000000380))
r24 = getpgid(r23)
r25 = getegid()
r26 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r26, 0xaf01, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
r27 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r27, 0x4028af11, &(0x7f0000000040))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f0000000500)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000580)="662e72720f2a216d54aa17e89c0d449032e652373ac558b7367ab3499e1527e088ccfe6e9e9da1cb7ef6af600fcc160d65b8cb23fcb40c603f34c8deab3dcea55f929ea931bc", 0x46}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYRES32=r18, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r15, @ANYRES32=r21, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r22, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r24, @ANYRES32, @ANYRES32=r25, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000240000000000000001000000010000", @ANYRES32, @ANYRES32=r26, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000", @ANYRES32, @ANYRES32, @ANYRES32=r27, @ANYBLOB='\x00\x00\x00\x00'], 0xeb, 0x2008044}], 0x3, 0x4c010)
umount2(&(0x7f0000000040)='.\x00', 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x7f12856cac1ab1af, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)

13:48:17 executing program 5:
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
chroot(0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
symlink(0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x78080, 0x0)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0)
mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="59568e3c344e0000f5ee8cf17b538a01ce2c826f2c3299c98cd5"], 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
pwritev(r0, &(0x7f0000000180), 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0xfffffffa, 0xd8, &(0x7f0000000580)=""/216, 0x0, 0x4, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x6, 0x3f, 0xaa}, 0x10}, 0x70)
syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x400000)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_open_dev$dri(&(0x7f0000000700)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x101100)
socket$kcm(0x29, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
socket(0xa, 0x80001, 0x0)
setuid(0x0)
r6 = socket$inet6(0xa, 0x0, 0x0)
close(r6)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002ec0)='/proc/sys/net/ipv4/\x00\x10/nc_version\x00\x00\x00\x83\xef\xdd&\xd4\xea\xe3T\xc7\xf4NC\\\xa9\x1e\xac\xdd\xcc\xe5uuj\xb7\x0f\xea@\x89\x7f\rs\xc7=p5\x98\x8dg\xf5\x90l\x04\xc6_\xab\r \x98\xd9\xa2\x84\xb12d\x86\r\xe6\a\"#v\xa3}\x82(\xf2\xce\xd9\x14\xaf\x92\x16\xaa\xf9M\xfa\xc9/;Y\x89\xca\x12\xa0o\x8a\xdc\xa8\bP!\xd4\xc8g\x1c\xbd\xff\x90M\x96C~\'r\xe1kFRe\x9cf\xcc\xd7\x1e\xc9\xfb\xf5\n]\x1a;!\xa9\x14\xd6\x05\x13`\f\x1aa\xed\xfa\xcc\xda\t\xe5C\xe6\x8d8\xb2\x17N\xec\x86:wu\xe5\xc3\xddVn\xc3$\xbc^\xb4\xac\b\xca\x16\x02\xcb\xbb>\x04\xf3.>3\xe4\xce\xaf\xb2\x1c\xef\x86\xdb\x03PD\xaf\x7f\xe3\x88\xd71=\x7f\xe5\xe4\x8fls', 0x2, 0x0)
getpid()
write$cgroup_pid(r7, &(0x7f00000036c0), 0x12)
open(0x0, 0x141042, 0x0)
getresgid(&(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880))
lstat(&(0x7f00000018c0)='./bus\x00', &(0x7f0000001900))
getgid()
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r8, 0x4028af11, &(0x7f0000000040))
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r9, 0xaf01, 0x0)
r10 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r10, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r10, 0x4028af11, 0x0)
r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r11, 0x4028af11, &(0x7f0000000040))
r12 = getpid()
sched_setscheduler(r12, 0x5, &(0x7f0000000380))
getpgid(r12)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r13 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r13, 0xaf01, 0x0)
r14 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r14, 0xaf01, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setuid(0x0)
r15 = socket$inet6(0xa, 0x0, 0x0)
close(r15)
r16 = getpid()
getresgid(&(0x7f0000001800)=<r17=>0x0, &(0x7f0000001840), &(0x7f0000001880))
r18 = getgid()
r19 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r19, 0xaf01, 0x0)
r20 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r20, 0xaf01, 0x0)
r21 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r21, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r21, 0x4028af11, 0x0)
r22 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r22, 0xaf01, 0x0)
r23 = getpid()
sched_setscheduler(r23, 0x5, &(0x7f0000000380))
r24 = getpgid(r23)
r25 = getegid()
r26 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r26, 0xaf01, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
r27 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r27, 0x4028af11, &(0x7f0000000040))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f0000000500)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000580)="662e72720f2a216d54aa17e89c0d449032e652373ac558b7367ab3499e1527e088ccfe6e9e9da1cb7ef6af600fcc160d65b8cb23fcb40c603f34c8deab3dcea55f929ea931bc", 0x46}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYRES32=r18, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r15, @ANYRES32=r21, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r22, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r24, @ANYRES32, @ANYRES32=r25, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000240000000000000001000000010000", @ANYRES32, @ANYRES32=r26, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000", @ANYRES32, @ANYRES32, @ANYRES32=r27, @ANYBLOB='\x00\x00\x00\x00'], 0xeb, 0x2008044}], 0x3, 0x4c010)
umount2(&(0x7f0000000040)='.\x00', 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x7f12856cac1ab1af, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)

13:48:17 executing program 4:
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
chroot(0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
symlink(0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x78080, 0x0)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0)
mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="59568e3c344e0000f5ee8cf17b538a01ce2c826f2c3299c98cd5"], 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
pwritev(r0, &(0x7f0000000180), 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0xfffffffa, 0xd8, &(0x7f0000000580)=""/216, 0x0, 0x4, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x6, 0x3f, 0xaa}, 0x10}, 0x70)
syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x400000)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_open_dev$dri(&(0x7f0000000700)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x101100)
socket$kcm(0x29, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
socket(0xa, 0x80001, 0x0)
setuid(0x0)
r6 = socket$inet6(0xa, 0x0, 0x0)
close(r6)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002ec0)='/proc/sys/net/ipv4/\x00\x10/nc_version\x00\x00\x00\x83\xef\xdd&\xd4\xea\xe3T\xc7\xf4NC\\\xa9\x1e\xac\xdd\xcc\xe5uuj\xb7\x0f\xea@\x89\x7f\rs\xc7=p5\x98\x8dg\xf5\x90l\x04\xc6_\xab\r \x98\xd9\xa2\x84\xb12d\x86\r\xe6\a\"#v\xa3}\x82(\xf2\xce\xd9\x14\xaf\x92\x16\xaa\xf9M\xfa\xc9/;Y\x89\xca\x12\xa0o\x8a\xdc\xa8\bP!\xd4\xc8g\x1c\xbd\xff\x90M\x96C~\'r\xe1kFRe\x9cf\xcc\xd7\x1e\xc9\xfb\xf5\n]\x1a;!\xa9\x14\xd6\x05\x13`\f\x1aa\xed\xfa\xcc\xda\t\xe5C\xe6\x8d8\xb2\x17N\xec\x86:wu\xe5\xc3\xddVn\xc3$\xbc^\xb4\xac\b\xca\x16\x02\xcb\xbb>\x04\xf3.>3\xe4\xce\xaf\xb2\x1c\xef\x86\xdb\x03PD\xaf\x7f\xe3\x88\xd71=\x7f\xe5\xe4\x8fls', 0x2, 0x0)
getpid()
write$cgroup_pid(r7, &(0x7f00000036c0), 0x12)
open(0x0, 0x141042, 0x0)
getresgid(&(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880))
lstat(&(0x7f00000018c0)='./bus\x00', &(0x7f0000001900))
getgid()
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r8, 0x4028af11, &(0x7f0000000040))
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r9, 0xaf01, 0x0)
r10 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r10, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r10, 0x4028af11, 0x0)
r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r11, 0x4028af11, &(0x7f0000000040))
r12 = getpid()
sched_setscheduler(r12, 0x5, &(0x7f0000000380))
getpgid(r12)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r13 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r13, 0xaf01, 0x0)
r14 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r14, 0xaf01, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setuid(0x0)
r15 = socket$inet6(0xa, 0x0, 0x0)
close(r15)
r16 = getpid()
getresgid(&(0x7f0000001800)=<r17=>0x0, &(0x7f0000001840), &(0x7f0000001880))
r18 = getgid()
r19 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r19, 0xaf01, 0x0)
r20 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r20, 0xaf01, 0x0)
r21 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r21, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r21, 0x4028af11, 0x0)
r22 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r22, 0xaf01, 0x0)
r23 = getpid()
sched_setscheduler(r23, 0x5, &(0x7f0000000380))
r24 = getpgid(r23)
r25 = getegid()
r26 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r26, 0xaf01, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
r27 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r27, 0x4028af11, &(0x7f0000000040))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f0000000500)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000580)="662e72720f2a216d54aa17e89c0d449032e652373ac558b7367ab3499e1527e088ccfe6e9e9da1cb7ef6af600fcc160d65b8cb23fcb40c603f34c8deab3dcea55f929ea931bc", 0x46}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYRES32=r18, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r15, @ANYRES32=r21, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r22, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r24, @ANYRES32, @ANYRES32=r25, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000240000000000000001000000010000", @ANYRES32, @ANYRES32=r26, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000", @ANYRES32, @ANYRES32, @ANYRES32=r27, @ANYBLOB='\x00\x00\x00\x00'], 0xeb, 0x2008044}], 0x3, 0x4c010)
umount2(&(0x7f0000000040)='.\x00', 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x7f12856cac1ab1af, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)

13:48:17 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc000900b8000699030000000500150005008178a8001600400004000200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0)

[  601.151786][T15223] IPv6: NLM_F_CREATE should be specified when creating new route
[  601.180415][T15223] __nla_validate_parse: 148 callbacks suppressed
[  601.180435][T15223] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'.
13:48:18 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc000900b8000699030000000500150005008178a8001600400004000200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0)

[  601.400682][T15231] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'.
13:48:18 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc000900b8000699030000000500150005008178a8001600400004000200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0)

13:48:18 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc000900b8000699030000000500150005008178a8001600400004000200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0)

[  601.601490][T15238] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'.
[  601.754409][T15249] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'.
13:48:18 executing program 0:
syz_open_dev$audion(0x0, 0xb4, 0x100)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x3}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0], 0x3}}, 0x0)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
open$dir(0x0, 0x0, 0x0)
ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffe)
r2 = creat(0x0, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000001c0)=0x80, 0x0)
getuid()

13:48:19 executing program 1:
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
chroot(0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
symlink(0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x78080, 0x0)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0)
mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="59568e3c344e0000f5ee8cf17b538a01ce2c826f2c3299c98cd5"], 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
pwritev(r0, &(0x7f0000000180), 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0xfffffffa, 0xd8, &(0x7f0000000580)=""/216, 0x0, 0x4, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x6, 0x3f, 0xaa}, 0x10}, 0x70)
syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x400000)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_open_dev$dri(&(0x7f0000000700)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x101100)
socket$kcm(0x29, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
socket(0xa, 0x80001, 0x0)
setuid(0x0)
r6 = socket$inet6(0xa, 0x0, 0x0)
close(r6)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002ec0)='/proc/sys/net/ipv4/\x00\x10/nc_version\x00\x00\x00\x83\xef\xdd&\xd4\xea\xe3T\xc7\xf4NC\\\xa9\x1e\xac\xdd\xcc\xe5uuj\xb7\x0f\xea@\x89\x7f\rs\xc7=p5\x98\x8dg\xf5\x90l\x04\xc6_\xab\r \x98\xd9\xa2\x84\xb12d\x86\r\xe6\a\"#v\xa3}\x82(\xf2\xce\xd9\x14\xaf\x92\x16\xaa\xf9M\xfa\xc9/;Y\x89\xca\x12\xa0o\x8a\xdc\xa8\bP!\xd4\xc8g\x1c\xbd\xff\x90M\x96C~\'r\xe1kFRe\x9cf\xcc\xd7\x1e\xc9\xfb\xf5\n]\x1a;!\xa9\x14\xd6\x05\x13`\f\x1aa\xed\xfa\xcc\xda\t\xe5C\xe6\x8d8\xb2\x17N\xec\x86:wu\xe5\xc3\xddVn\xc3$\xbc^\xb4\xac\b\xca\x16\x02\xcb\xbb>\x04\xf3.>3\xe4\xce\xaf\xb2\x1c\xef\x86\xdb\x03PD\xaf\x7f\xe3\x88\xd71=\x7f\xe5\xe4\x8fls', 0x2, 0x0)
getpid()
write$cgroup_pid(r7, &(0x7f00000036c0), 0x12)
open(0x0, 0x141042, 0x0)
getresgid(&(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880))
lstat(&(0x7f00000018c0)='./bus\x00', &(0x7f0000001900))
getgid()
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r8, 0x4028af11, &(0x7f0000000040))
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r9, 0xaf01, 0x0)
r10 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r10, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r10, 0x4028af11, 0x0)
r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r11, 0x4028af11, &(0x7f0000000040))
r12 = getpid()
sched_setscheduler(r12, 0x5, &(0x7f0000000380))
getpgid(r12)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r13 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r13, 0xaf01, 0x0)
r14 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r14, 0xaf01, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setuid(0x0)
r15 = socket$inet6(0xa, 0x0, 0x0)
close(r15)
r16 = getpid()
getresgid(&(0x7f0000001800)=<r17=>0x0, &(0x7f0000001840), &(0x7f0000001880))
r18 = getgid()
r19 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r19, 0xaf01, 0x0)
r20 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r20, 0xaf01, 0x0)
r21 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r21, 0xaf01, 0x0)
ioctl$TUNSETIFINDEX(r21, 0x4028af11, 0x0)
r22 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r22, 0xaf01, 0x0)
r23 = getpid()
sched_setscheduler(r23, 0x5, &(0x7f0000000380))
r24 = getpgid(r23)
r25 = getegid()
r26 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r26, 0xaf01, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0)
r27 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$TUNSETIFINDEX(r27, 0x4028af11, &(0x7f0000000040))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f0000000500)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000580)="662e72720f2a216d54aa17e89c0d449032e652373ac558b7367ab3499e1527e088ccfe6e9e9da1cb7ef6af600fcc160d65b8cb23fcb40c603f34c8deab3dcea55f929ea931bc", 0x46}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYRES32=r18, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r15, @ANYRES32=r21, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r22, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r24, @ANYRES32, @ANYRES32=r25, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000240000000000000001000000010000", @ANYRES32, @ANYRES32=r26, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000", @ANYRES32, @ANYRES32, @ANYRES32=r27, @ANYBLOB='\x00\x00\x00\x00'], 0xeb, 0x2008044}], 0x3, 0x4c010)
umount2(&(0x7f0000000040)='.\x00', 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x7f12856cac1ab1af, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)

13:48:19 executing program 2:
setregid(0x0, 0xee00)
setregid(0x0, 0xee00)

13:48:19 executing program 2:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
dup2(r2, r0)

13:48:20 executing program 3:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x36d)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3", 0x1}], 0x1}}], 0x1, 0x40000fc)

13:48:20 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x3800)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000040))
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0)
ioctl$RTC_UIE_ON(r3, 0x7003)
ioctl$RTC_UIE_OFF(r3, 0x7004)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00')
ioctl$RTC_UIE_ON(r3, 0x7003)

13:48:20 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x163, 0x11, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

13:48:20 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
sched_setscheduler(0x0, 0xd, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x9, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = dup3(r1, r2, 0x0)
dup2(r4, r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xe7a62a5fe183e2e4, 0x0)
tkill(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f00000001c0)=0x1ff, 0x4)
lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240))
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2})
ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0)
userfaultfd(0x65eddfe6250a2fa4)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)

13:48:20 executing program 4:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x2000000000000006, 0x0)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x2)

13:48:20 executing program 2:
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x10000)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x6000, 0x0)

13:48:21 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x8, 0x20000)
socket(0x1, 0x5, 0x0)
dup(0xffffffffffffffff)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
r1 = gettid()
tkill(r1, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = socket$kcm(0xa, 0x802, 0x88)
sendmsg$kcm(r6, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="3800000000000000290000000400000078040e01000000c0073510fbff0000b408000000fab771172119000020002000004e5e1000388022"], 0x38}, 0x8000)
sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec, 0x80, &(0x7f0000000040)=[{&(0x7f0000000280), 0xe803}], 0x1}, 0x0)

13:48:21 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
sched_setscheduler(0x0, 0xd, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x9, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = dup3(r1, r2, 0x0)
dup2(r4, r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xe7a62a5fe183e2e4, 0x0)
tkill(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f00000001c0)=0x1ff, 0x4)
lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240))
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2})
ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0)
userfaultfd(0x65eddfe6250a2fa4)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)

13:48:22 executing program 0:
syz_open_dev$audion(0x0, 0xb4, 0x100)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x3}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0], 0x3}}, 0x0)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
open$dir(0x0, 0x0, 0x0)
ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffe)
r2 = creat(0x0, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000001c0)=0x80, 0x0)
getuid()

13:48:22 executing program 0:
syz_open_dev$audion(0x0, 0xb4, 0x100)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x3}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0], 0x3}}, 0x0)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
open$dir(0x0, 0x0, 0x0)
ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffe)
r2 = creat(0x0, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000001c0)=0x80, 0x0)
getuid()

13:48:22 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
sched_setscheduler(0x0, 0xd, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x9, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = dup3(r1, r2, 0x0)
dup2(r4, r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xe7a62a5fe183e2e4, 0x0)
tkill(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f00000001c0)=0x1ff, 0x4)
lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240))
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2})
ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0)
userfaultfd(0x65eddfe6250a2fa4)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)

13:48:22 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
sched_setscheduler(0x0, 0xd, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x9, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = dup3(r1, r2, 0x0)
dup2(r4, r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xe7a62a5fe183e2e4, 0x0)
tkill(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f00000001c0)=0x1ff, 0x4)
lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240))
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2})
ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0)
userfaultfd(0x65eddfe6250a2fa4)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)

13:48:22 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x13})

13:48:22 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
sched_setscheduler(0x0, 0xd, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x9, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = dup3(r1, r2, 0x0)
dup2(r4, r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xe7a62a5fe183e2e4, 0x0)
tkill(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f00000001c0)=0x1ff, 0x4)
lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240))
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2})
ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0)
userfaultfd(0x65eddfe6250a2fa4)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)

13:48:22 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = socket(0x10, 0x802, 0x0)
write(r3, &(0x7f0000000000)="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", 0xfc)
setsockopt$inet_mreq(r3, 0x0, 0x527a9f31005bc384, 0x0, 0x35a)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(r1, 0x0, 0x102af785ef8793bb)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff})
r5 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0)
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000140)={0x4000000000980912, 0x8})
vmsplice(r5, &(0x7f0000000080)=[{&(0x7f0000000240)='\n', 0x1}], 0x1, 0x2)
ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000180)=<r6=>0x0)
perf_event_open(0x0, r6, 0xe, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
r7 = socket(0x10, 0x802, 0x0)
write(r7, &(0x7f0000000000)="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", 0xfc)
sendto$packet(r7, &(0x7f0000000340), 0xfffffffffffffe06, 0x57, 0x0, 0x340)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'})

13:48:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast2}]}]}, 0x24}}, 0x0)

[  606.132682][T15353] netlink: 'syz-executor.1': attribute type 12 has an invalid length.
[  606.304213][T15360] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
13:48:23 executing program 0:
syz_open_dev$audion(0x0, 0xb4, 0x100)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x3}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0], 0x3}}, 0x0)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
open$dir(0x0, 0x0, 0x0)
ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffe)
r2 = creat(0x0, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000001c0)=0x80, 0x0)
getuid()

[  606.364773][T15361] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  606.442985][T15364] netlink: 'syz-executor.1': attribute type 12 has an invalid length.
13:48:23 executing program 4:
r0 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x1}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000200)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000140)=[{&(0x7f00000001c0)="f4", 0x1}], 0x1}, 0x0)

13:48:23 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
sched_setscheduler(0x0, 0xd, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x9, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = dup3(r1, r2, 0x0)
dup2(r4, r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xe7a62a5fe183e2e4, 0x0)
tkill(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f00000001c0)=0x1ff, 0x4)
lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240))
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2})
ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0)
userfaultfd(0x65eddfe6250a2fa4)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)

13:48:23 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
sched_setscheduler(0x0, 0xd, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x9, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = dup3(r1, r2, 0x0)
dup2(r4, r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xe7a62a5fe183e2e4, 0x0)
tkill(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f00000001c0)=0x1ff, 0x4)
lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240))
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2})
ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0)
userfaultfd(0x65eddfe6250a2fa4)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)

13:48:24 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x5385, 0x0)

13:48:24 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
sched_setscheduler(0x0, 0xd, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x9, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = dup3(r1, r2, 0x0)
dup2(r4, r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xe7a62a5fe183e2e4, 0x0)
tkill(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f00000001c0)=0x1ff, 0x4)
lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240))
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2})
ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0)
userfaultfd(0x65eddfe6250a2fa4)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)

13:48:24 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clock_nanosleep(0x9, 0x1, &(0x7f0000000180), 0x0)

13:48:24 executing program 4:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRESDEC]]], 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

13:48:24 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x5385, 0x0)

13:48:24 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
sched_setscheduler(0x0, 0xd, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x9, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = dup3(r1, r2, 0x0)
dup2(r4, r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xe7a62a5fe183e2e4, 0x0)
tkill(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f00000001c0)=0x1ff, 0x4)
lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240))
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2})
ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0)
userfaultfd(0x65eddfe6250a2fa4)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)

13:48:24 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = socket(0x10, 0x802, 0x0)
write(r3, &(0x7f0000000000)="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", 0xfc)
setsockopt$inet_mreq(r3, 0x0, 0x527a9f31005bc384, 0x0, 0x35a)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(r1, 0x0, 0x102af785ef8793bb)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff})
r5 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0)
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000140)={0x4000000000980912, 0x8})
vmsplice(r5, &(0x7f0000000080)=[{&(0x7f0000000240)='\n', 0x1}], 0x1, 0x2)
ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000180)=<r6=>0x0)
perf_event_open(0x0, r6, 0xe, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
r7 = socket(0x10, 0x802, 0x0)
write(r7, &(0x7f0000000000)="fc0000001c000705ab092506090007000aab08000400000002002593210001c000000000000000000000070000039815fa2c1ec28656aaa79bb9d95662070000bc000c00f0036c6c256f1a272fdf0d11512fd633d640007a01007a8934d07302ade01720d3d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cec18444eb29d3ef3d92c83170e5bba4a46143ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dffff10ded6dfd19cd27b45304dc30083df150c3b880f7f0046a60467b4d57155870258a10000c880ac801fe4af3d0041f0d48f6f0000080548deac270e33429fd31101350000000000", 0xfc)
sendto$packet(r7, &(0x7f0000000340), 0xfffffffffffffe06, 0x57, 0x0, 0x340)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'})

13:48:24 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x5385, 0x0)

[  607.616317][T15410] EXT4-fs (loop4): Unrecognized mount option "À
Ð" or missing value
[  607.638865][T15410] EXT4-fs (loop4): failed to parse options in superblock: À
Ð
[  607.651273][T15410] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support!
[  607.673019][T15410] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  607.683464][T15410] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  607.693409][T15418] netlink: 'syz-executor.1': attribute type 12 has an invalid length.
[  607.704991][T15410] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  607.771893][T15410] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=128, mo=a002e018, mo2=0002]
[  607.805067][T15410] System zones: 0-7
[  607.836025][T15410] EXT4-fs (loop4): mounted filesystem without journal. Opts: À
Ð; ,errors=continue
[  607.878507][T15420] netlink: 'syz-executor.1': attribute type 12 has an invalid length.
13:48:25 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = socket(0x10, 0x802, 0x0)
write(r3, &(0x7f0000000000)="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", 0xfc)
setsockopt$inet_mreq(r3, 0x0, 0x527a9f31005bc384, 0x0, 0x35a)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(r1, 0x0, 0x102af785ef8793bb)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff})
r5 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0)
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000140)={0x4000000000980912, 0x8})
vmsplice(r5, &(0x7f0000000080)=[{&(0x7f0000000240)='\n', 0x1}], 0x1, 0x2)
ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000180)=<r6=>0x0)
perf_event_open(0x0, r6, 0xe, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
r7 = socket(0x10, 0x802, 0x0)
write(r7, &(0x7f0000000000)="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", 0xfc)
sendto$packet(r7, &(0x7f0000000340), 0xfffffffffffffe06, 0x57, 0x0, 0x340)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'})

13:48:25 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = socket(0x10, 0x802, 0x0)
write(r3, &(0x7f0000000000)="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", 0xfc)
setsockopt$inet_mreq(r3, 0x0, 0x527a9f31005bc384, 0x0, 0x35a)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(r1, 0x0, 0x102af785ef8793bb)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff})
r5 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0)
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000140)={0x4000000000980912, 0x8})
vmsplice(r5, &(0x7f0000000080)=[{&(0x7f0000000240)='\n', 0x1}], 0x1, 0x2)
ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000180)=<r6=>0x0)
perf_event_open(0x0, r6, 0xe, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
r7 = socket(0x10, 0x802, 0x0)
write(r7, &(0x7f0000000000)="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", 0xfc)
sendto$packet(r7, &(0x7f0000000340), 0xfffffffffffffe06, 0x57, 0x0, 0x340)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'})

13:48:25 executing program 4:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRESDEC]]], 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[  608.153680][T15429] netlink: 'syz-executor.3': attribute type 12 has an invalid length.
13:48:25 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
sched_setscheduler(0x0, 0xd, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x9, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = dup3(r1, r2, 0x0)
dup2(r4, r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xe7a62a5fe183e2e4, 0x0)
tkill(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f00000001c0)=0x1ff, 0x4)
lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240))
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2})
ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0)
userfaultfd(0x65eddfe6250a2fa4)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)

13:48:25 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x5385, 0x0)

[  608.261623][T15433] netlink: 'syz-executor.2': attribute type 12 has an invalid length.
[  608.408276][T15429] netlink: 'syz-executor.3': attribute type 12 has an invalid length.
13:48:25 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = socket(0x10, 0x802, 0x0)
write(r3, &(0x7f0000000000)="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", 0xfc)
setsockopt$inet_mreq(r3, 0x0, 0x527a9f31005bc384, 0x0, 0x35a)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(r1, 0x0, 0x102af785ef8793bb)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff})
r5 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0)
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000140)={0x4000000000980912, 0x8})
vmsplice(r5, &(0x7f0000000080)=[{&(0x7f0000000240)='\n', 0x1}], 0x1, 0x2)
ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000180)=<r6=>0x0)
perf_event_open(0x0, r6, 0xe, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
r7 = socket(0x10, 0x802, 0x0)
write(r7, &(0x7f0000000000)="fc0000001c000705ab092506090007000aab08000400000002002593210001c000000000000000000000070000039815fa2c1ec28656aaa79bb9d95662070000bc000c00f0036c6c256f1a272fdf0d11512fd633d640007a01007a8934d07302ade01720d3d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cec18444eb29d3ef3d92c83170e5bba4a46143ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dffff10ded6dfd19cd27b45304dc30083df150c3b880f7f0046a60467b4d57155870258a10000c880ac801fe4af3d0041f0d48f6f0000080548deac270e33429fd31101350000000000", 0xfc)
sendto$packet(r7, &(0x7f0000000340), 0xfffffffffffffe06, 0x57, 0x0, 0x340)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'})

[  608.530311][T15433] netlink: 'syz-executor.2': attribute type 12 has an invalid length.
13:48:25 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = socket(0x10, 0x802, 0x0)
write(r3, &(0x7f0000000000)="fc0000001c000705ab092506090007000aab08000400000002002593210001c000000000000000000000070000039815fa2c1ec28656aaa79bb9d95662070000bc000c00f0036c6c256f1a272fdf0d11512fd633d640007a01007a8934d07302ade01720d3d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cec18444eb29d3ef3d92c83170e5bba4a46143ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dffff10ded6dfd19cd27b45304dc30083df150c3b880f7f0046a60467b4d57155870258a10000c880ac801fe4af3d0041f0d48f6f0000080548deac270e33429fd31101350000000000", 0xfc)
setsockopt$inet_mreq(r3, 0x0, 0x527a9f31005bc384, 0x0, 0x35a)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(r1, 0x0, 0x102af785ef8793bb)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff})
r5 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0)
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000140)={0x4000000000980912, 0x8})
vmsplice(r5, &(0x7f0000000080)=[{&(0x7f0000000240)='\n', 0x1}], 0x1, 0x2)
ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000180)=<r6=>0x0)
perf_event_open(0x0, r6, 0xe, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
r7 = socket(0x10, 0x802, 0x0)
write(r7, &(0x7f0000000000)="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", 0xfc)
sendto$packet(r7, &(0x7f0000000340), 0xfffffffffffffe06, 0x57, 0x0, 0x340)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'})

13:48:25 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = socket(0x10, 0x802, 0x0)
write(r3, &(0x7f0000000000)="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", 0xfc)
setsockopt$inet_mreq(r3, 0x0, 0x527a9f31005bc384, 0x0, 0x35a)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(r1, 0x0, 0x102af785ef8793bb)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff})
r5 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0)
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000140)={0x4000000000980912, 0x8})
vmsplice(r5, &(0x7f0000000080)=[{&(0x7f0000000240)='\n', 0x1}], 0x1, 0x2)
ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000180)=<r6=>0x0)
perf_event_open(0x0, r6, 0xe, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
r7 = socket(0x10, 0x802, 0x0)
write(r7, &(0x7f0000000000)="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", 0xfc)
sendto$packet(r7, &(0x7f0000000340), 0xfffffffffffffe06, 0x57, 0x0, 0x340)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'})

[  608.713023][T15448] EXT4-fs (loop4): Unrecognized mount option "À
Ð" or missing value
[  608.728030][T15455] netlink: 'syz-executor.0': attribute type 12 has an invalid length.
13:48:25 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = socket(0x10, 0x802, 0x0)
write(r3, &(0x7f0000000000)="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", 0xfc)
setsockopt$inet_mreq(r3, 0x0, 0x527a9f31005bc384, 0x0, 0x35a)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(r1, 0x0, 0x102af785ef8793bb)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff})
r5 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0)
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000140)={0x4000000000980912, 0x8})
vmsplice(r5, &(0x7f0000000080)=[{&(0x7f0000000240)='\n', 0x1}], 0x1, 0x2)
ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000180)=<r6=>0x0)
perf_event_open(0x0, r6, 0xe, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
r7 = socket(0x10, 0x802, 0x0)
write(r7, &(0x7f0000000000)="fc0000001c000705ab092506090007000aab08000400000002002593210001c000000000000000000000070000039815fa2c1ec28656aaa79bb9d95662070000bc000c00f0036c6c256f1a272fdf0d11512fd633d640007a01007a8934d07302ade01720d3d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cec18444eb29d3ef3d92c83170e5bba4a46143ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dffff10ded6dfd19cd27b45304dc30083df150c3b880f7f0046a60467b4d57155870258a10000c880ac801fe4af3d0041f0d48f6f0000080548deac270e33429fd31101350000000000", 0xfc)
sendto$packet(r7, &(0x7f0000000340), 0xfffffffffffffe06, 0x57, 0x0, 0x340)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'})

[  608.821296][T15448] EXT4-fs (loop4): failed to parse options in superblock: À
Ð
[  608.853956][T15448] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  608.882867][T15448] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  608.902881][T15461] netlink: 'syz-executor.2': attribute type 12 has an invalid length.
[  608.906121][T15448] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
13:48:26 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = socket(0x10, 0x802, 0x0)
write(r3, &(0x7f0000000000)="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", 0xfc)
setsockopt$inet_mreq(r3, 0x0, 0x527a9f31005bc384, 0x0, 0x35a)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(r1, 0x0, 0x102af785ef8793bb)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff})
r5 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0)
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000140)={0x4000000000980912, 0x8})
vmsplice(r5, &(0x7f0000000080)=[{&(0x7f0000000240)='\n', 0x1}], 0x1, 0x2)
ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000180)=<r6=>0x0)
perf_event_open(0x0, r6, 0xe, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
r7 = socket(0x10, 0x802, 0x0)
write(r7, &(0x7f0000000000)="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", 0xfc)
sendto$packet(r7, &(0x7f0000000340), 0xfffffffffffffe06, 0x57, 0x0, 0x340)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'})

[  608.949993][T15448] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=128, mo=a002e018, mo2=0002]
[  609.019435][T15448] System zones: 0-7
[  609.061473][T15448] EXT4-fs (loop4): mounted filesystem without journal. Opts: À
Ð; ,errors=continue
13:48:26 executing program 4:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRESDEC]]], 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

13:48:26 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = socket(0x10, 0x802, 0x0)
write(r3, &(0x7f0000000000)="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", 0xfc)
setsockopt$inet_mreq(r3, 0x0, 0x527a9f31005bc384, 0x0, 0x35a)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(r1, 0x0, 0x102af785ef8793bb)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff})
r5 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0)
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000140)={0x4000000000980912, 0x8})
vmsplice(r5, &(0x7f0000000080)=[{&(0x7f0000000240)='\n', 0x1}], 0x1, 0x2)
ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000180)=<r6=>0x0)
perf_event_open(0x0, r6, 0xe, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
r7 = socket(0x10, 0x802, 0x0)
write(r7, &(0x7f0000000000)="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", 0xfc)
sendto$packet(r7, &(0x7f0000000340), 0xfffffffffffffe06, 0x57, 0x0, 0x340)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'})

13:48:26 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = socket(0x10, 0x802, 0x0)
write(r3, &(0x7f0000000000)="fc0000001c000705ab092506090007000aab08000400000002002593210001c000000000000000000000070000039815fa2c1ec28656aaa79bb9d95662070000bc000c00f0036c6c256f1a272fdf0d11512fd633d640007a01007a8934d07302ade01720d3d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cec18444eb29d3ef3d92c83170e5bba4a46143ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dffff10ded6dfd19cd27b45304dc30083df150c3b880f7f0046a60467b4d57155870258a10000c880ac801fe4af3d0041f0d48f6f0000080548deac270e33429fd31101350000000000", 0xfc)
setsockopt$inet_mreq(r3, 0x0, 0x527a9f31005bc384, 0x0, 0x35a)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(r1, 0x0, 0x102af785ef8793bb)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff})
r5 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0)
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000140)={0x4000000000980912, 0x8})
vmsplice(r5, &(0x7f0000000080)=[{&(0x7f0000000240)='\n', 0x1}], 0x1, 0x2)
ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000180)=<r6=>0x0)
perf_event_open(0x0, r6, 0xe, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
r7 = socket(0x10, 0x802, 0x0)
write(r7, &(0x7f0000000000)="fc0000001c000705ab092506090007000aab08000400000002002593210001c000000000000000000000070000039815fa2c1ec28656aaa79bb9d95662070000bc000c00f0036c6c256f1a272fdf0d11512fd633d640007a01007a8934d07302ade01720d3d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cec18444eb29d3ef3d92c83170e5bba4a46143ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dffff10ded6dfd19cd27b45304dc30083df150c3b880f7f0046a60467b4d57155870258a10000c880ac801fe4af3d0041f0d48f6f0000080548deac270e33429fd31101350000000000", 0xfc)
sendto$packet(r7, &(0x7f0000000340), 0xfffffffffffffe06, 0x57, 0x0, 0x340)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'})

13:48:26 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = socket(0x10, 0x802, 0x0)
write(r3, &(0x7f0000000000)="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", 0xfc)
setsockopt$inet_mreq(r3, 0x0, 0x527a9f31005bc384, 0x0, 0x35a)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(r1, 0x0, 0x102af785ef8793bb)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff})
r5 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0)
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000140)={0x4000000000980912, 0x8})
vmsplice(r5, &(0x7f0000000080)=[{&(0x7f0000000240)='\n', 0x1}], 0x1, 0x2)
ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000180)=<r6=>0x0)
perf_event_open(0x0, r6, 0xe, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
r7 = socket(0x10, 0x802, 0x0)
write(r7, &(0x7f0000000000)="fc0000001c000705ab092506090007000aab08000400000002002593210001c000000000000000000000070000039815fa2c1ec28656aaa79bb9d95662070000bc000c00f0036c6c256f1a272fdf0d11512fd633d640007a01007a8934d07302ade01720d3d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cec18444eb29d3ef3d92c83170e5bba4a46143ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dffff10ded6dfd19cd27b45304dc30083df150c3b880f7f0046a60467b4d57155870258a10000c880ac801fe4af3d0041f0d48f6f0000080548deac270e33429fd31101350000000000", 0xfc)
sendto$packet(r7, &(0x7f0000000340), 0xfffffffffffffe06, 0x57, 0x0, 0x340)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'})

13:48:26 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = socket(0x10, 0x802, 0x0)
write(r3, &(0x7f0000000000)="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", 0xfc)
setsockopt$inet_mreq(r3, 0x0, 0x527a9f31005bc384, 0x0, 0x35a)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(r1, 0x0, 0x102af785ef8793bb)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff})
r5 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0)
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000140)={0x4000000000980912, 0x8})
vmsplice(r5, &(0x7f0000000080)=[{&(0x7f0000000240)='\n', 0x1}], 0x1, 0x2)
ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000180)=<r6=>0x0)
perf_event_open(0x0, r6, 0xe, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
r7 = socket(0x10, 0x802, 0x0)
write(r7, &(0x7f0000000000)="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", 0xfc)
sendto$packet(r7, &(0x7f0000000340), 0xfffffffffffffe06, 0x57, 0x0, 0x340)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'})

[  609.886705][T15490] EXT4-fs (loop4): Unrecognized mount option "À
Ð" or missing value
[  609.895178][T15490] EXT4-fs (loop4): failed to parse options in superblock: À
Ð
[  609.920089][T15490] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  609.956455][T15490] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  610.009275][T15490] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  610.098073][T15490] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=128, mo=a002e018, mo2=0002]
[  610.123777][T15490] System zones: 0-7
[  610.139371][T15490] EXT4-fs (loop4): mounted filesystem without journal. Opts: À
Ð; ,errors=continue
13:48:27 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = socket(0x10, 0x802, 0x0)
write(r3, &(0x7f0000000000)="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", 0xfc)
setsockopt$inet_mreq(r3, 0x0, 0x527a9f31005bc384, 0x0, 0x35a)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(r1, 0x0, 0x102af785ef8793bb)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff})
r5 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0)
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000140)={0x4000000000980912, 0x8})
vmsplice(r5, &(0x7f0000000080)=[{&(0x7f0000000240)='\n', 0x1}], 0x1, 0x2)
ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000180)=<r6=>0x0)
perf_event_open(0x0, r6, 0xe, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
r7 = socket(0x10, 0x802, 0x0)
write(r7, &(0x7f0000000000)="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", 0xfc)
sendto$packet(r7, &(0x7f0000000340), 0xfffffffffffffe06, 0x57, 0x0, 0x340)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'})

13:48:27 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = socket(0x10, 0x802, 0x0)
write(r3, &(0x7f0000000000)="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", 0xfc)
setsockopt$inet_mreq(r3, 0x0, 0x527a9f31005bc384, 0x0, 0x35a)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(r1, 0x0, 0x102af785ef8793bb)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff})
r5 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0)
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000140)={0x4000000000980912, 0x8})
vmsplice(r5, &(0x7f0000000080)=[{&(0x7f0000000240)='\n', 0x1}], 0x1, 0x2)
ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000180)=<r6=>0x0)
perf_event_open(0x0, r6, 0xe, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
r7 = socket(0x10, 0x802, 0x0)
write(r7, &(0x7f0000000000)="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", 0xfc)
sendto$packet(r7, &(0x7f0000000340), 0xfffffffffffffe06, 0x57, 0x0, 0x340)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'})

13:48:27 executing program 4:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRESDEC]]], 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

13:48:27 executing program 3:
r0 = socket(0xa, 0x802, 0x0)
setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c)

13:48:27 executing program 2:
r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x20a)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/119, 0x77}], 0x1)

13:48:27 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCGSOFTCAR(r0, 0x2, &(0x7f0000000000))

13:48:27 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r3, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, &(0x7f0000000300))
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0x7, 0x872, 0x3, 0x1, 0x7ff, 0x10000, 0x0, 0x9a7f, 0x9, 0x101, 0x33d, 0x4, 0x0, 0x7, 0x5]}, &(0x7f0000000340)=0x100)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r5, 0x0, 0x40000, 0x4)
fallocate(r4, 0x0, 0x0, 0x110001)
fdatasync(r5)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xd000000, r5, 0x0, 0x8})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={<r6=>0x0, 0x352b, 0x8001, 0x4}, &(0x7f0000000180)=0x14)
r7 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2)
socket$inet6(0xa, 0x80000, 0x35)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r6, @in={{0x2, 0x0, @remote}}, 0x5, 0x0, 0x6, 0x0, 0x12}, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)

13:48:27 executing program 3:
set_mempolicy(0x4001, &(0x7f0000000040)=0x6c554818, 0x5)
r0 = perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)

[  610.896613][T15536] EXT4-fs (loop4): Unrecognized mount option "À
Ð" or missing value
[  610.940013][T15536] EXT4-fs (loop4): failed to parse options in superblock: À
Ð
[  610.977987][T15536] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  611.050966][T15536] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  611.106974][T15536] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  611.154504][T15536] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=128, mo=a002e018, mo2=0002]
[  611.169862][T15536] System zones: 0-7
[  611.175304][T15536] EXT4-fs (loop4): mounted filesystem without journal. Opts: À
Ð; ,errors=continue
13:48:28 executing program 3:
set_mempolicy(0x4001, &(0x7f0000000040)=0x6c554818, 0x5)
r0 = perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)

13:48:28 executing program 4:
set_mempolicy(0x4001, &(0x7f0000000040)=0x6c554818, 0x5)
r0 = perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)

13:48:28 executing program 2:
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x29cb5a25, &(0x7f0000000340), 0x0, 0x0, 0xffbe}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21})
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
getdents(r0, &(0x7f0000000040)=""/46, 0x2e)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
getpriority(0x0, 0x0)
ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$dri(0x0, 0x36a7, 0x0)
syz_open_dev$vbi(0x0, 0x0, 0x2)
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0xd2eea2144d243798)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')

13:48:28 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = socket(0x10, 0x802, 0x0)
write(r3, &(0x7f0000000000)="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", 0xfc)
setsockopt$inet_mreq(r3, 0x0, 0x527a9f31005bc384, 0x0, 0x35a)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(r1, 0x0, 0x102af785ef8793bb)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff})
r5 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0)
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000140)={0x4000000000980912, 0x8})
vmsplice(r5, &(0x7f0000000080)=[{&(0x7f0000000240)='\n', 0x1}], 0x1, 0x2)
ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000180)=<r6=>0x0)
perf_event_open(0x0, r6, 0xe, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
r7 = socket(0x10, 0x802, 0x0)
write(r7, &(0x7f0000000000)="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", 0xfc)
sendto$packet(r7, &(0x7f0000000340), 0xfffffffffffffe06, 0x57, 0x0, 0x340)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'})

13:48:28 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r3, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, &(0x7f0000000300))
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0x7, 0x872, 0x3, 0x1, 0x7ff, 0x10000, 0x0, 0x9a7f, 0x9, 0x101, 0x33d, 0x4, 0x0, 0x7, 0x5]}, &(0x7f0000000340)=0x100)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r5, 0x0, 0x40000, 0x4)
fallocate(r4, 0x0, 0x0, 0x110001)
fdatasync(r5)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xd000000, r5, 0x0, 0x8})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={<r6=>0x0, 0x352b, 0x8001, 0x4}, &(0x7f0000000180)=0x14)
r7 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2)
socket$inet6(0xa, 0x80000, 0x35)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r6, @in={{0x2, 0x0, @remote}}, 0x5, 0x0, 0x6, 0x0, 0x12}, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)

13:48:28 executing program 3:
set_mempolicy(0x4001, &(0x7f0000000040)=0x6c554818, 0x5)
r0 = perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)

13:48:28 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r3, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, &(0x7f0000000300))
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0x7, 0x872, 0x3, 0x1, 0x7ff, 0x10000, 0x0, 0x9a7f, 0x9, 0x101, 0x33d, 0x4, 0x0, 0x7, 0x5]}, &(0x7f0000000340)=0x100)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r5, 0x0, 0x40000, 0x4)
fallocate(r4, 0x0, 0x0, 0x110001)
fdatasync(r5)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xd000000, r5, 0x0, 0x8})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={<r6=>0x0, 0x352b, 0x8001, 0x4}, &(0x7f0000000180)=0x14)
r7 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2)
socket$inet6(0xa, 0x80000, 0x35)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r6, @in={{0x2, 0x0, @remote}}, 0x5, 0x0, 0x6, 0x0, 0x12}, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)

[  611.955357][T15579] validate_nla: 20 callbacks suppressed
[  611.955371][T15579] netlink: 'syz-executor.5': attribute type 12 has an invalid length.
13:48:29 executing program 4:
set_mempolicy(0x4001, &(0x7f0000000040)=0x6c554818, 0x5)
r0 = perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)

13:48:29 executing program 2:
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x29cb5a25, &(0x7f0000000340), 0x0, 0x0, 0xffbe}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21})
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
getdents(r0, &(0x7f0000000040)=""/46, 0x2e)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
getpriority(0x0, 0x0)
ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$dri(0x0, 0x36a7, 0x0)
syz_open_dev$vbi(0x0, 0x0, 0x2)
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0xd2eea2144d243798)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')

13:48:29 executing program 3:
set_mempolicy(0x4001, &(0x7f0000000040)=0x6c554818, 0x5)
r0 = perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)

[  612.208495][T15574] netlink: 'syz-executor.5': attribute type 12 has an invalid length.
13:48:29 executing program 4:
set_mempolicy(0x4001, &(0x7f0000000040)=0x6c554818, 0x5)
r0 = perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)

13:48:29 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r3, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, &(0x7f0000000300))
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0x7, 0x872, 0x3, 0x1, 0x7ff, 0x10000, 0x0, 0x9a7f, 0x9, 0x101, 0x33d, 0x4, 0x0, 0x7, 0x5]}, &(0x7f0000000340)=0x100)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r5, 0x0, 0x40000, 0x4)
fallocate(r4, 0x0, 0x0, 0x110001)
fdatasync(r5)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xd000000, r5, 0x0, 0x8})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={<r6=>0x0, 0x352b, 0x8001, 0x4}, &(0x7f0000000180)=0x14)
r7 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2)
socket$inet6(0xa, 0x80000, 0x35)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r6, @in={{0x2, 0x0, @remote}}, 0x5, 0x0, 0x6, 0x0, 0x12}, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)

13:48:29 executing program 3:
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x29cb5a25, &(0x7f0000000340), 0x0, 0x0, 0xffbe}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21})
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
getdents(r0, &(0x7f0000000040)=""/46, 0x2e)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
getpriority(0x0, 0x0)
ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$dri(0x0, 0x36a7, 0x0)
syz_open_dev$vbi(0x0, 0x0, 0x2)
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0xd2eea2144d243798)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')

13:48:29 executing program 2:
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x29cb5a25, &(0x7f0000000340), 0x0, 0x0, 0xffbe}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21})
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
getdents(r0, &(0x7f0000000040)=""/46, 0x2e)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
getpriority(0x0, 0x0)
ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$dri(0x0, 0x36a7, 0x0)
syz_open_dev$vbi(0x0, 0x0, 0x2)
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0xd2eea2144d243798)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')

13:48:29 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r3, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, &(0x7f0000000300))
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0x7, 0x872, 0x3, 0x1, 0x7ff, 0x10000, 0x0, 0x9a7f, 0x9, 0x101, 0x33d, 0x4, 0x0, 0x7, 0x5]}, &(0x7f0000000340)=0x100)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r5, 0x0, 0x40000, 0x4)
fallocate(r4, 0x0, 0x0, 0x110001)
fdatasync(r5)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xd000000, r5, 0x0, 0x8})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={<r6=>0x0, 0x352b, 0x8001, 0x4}, &(0x7f0000000180)=0x14)
r7 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2)
socket$inet6(0xa, 0x80000, 0x35)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r6, @in={{0x2, 0x0, @remote}}, 0x5, 0x0, 0x6, 0x0, 0x12}, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)

13:48:29 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r3, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, &(0x7f0000000300))
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0x7, 0x872, 0x3, 0x1, 0x7ff, 0x10000, 0x0, 0x9a7f, 0x9, 0x101, 0x33d, 0x4, 0x0, 0x7, 0x5]}, &(0x7f0000000340)=0x100)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r5, 0x0, 0x40000, 0x4)
fallocate(r4, 0x0, 0x0, 0x110001)
fdatasync(r5)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xd000000, r5, 0x0, 0x8})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={<r6=>0x0, 0x352b, 0x8001, 0x4}, &(0x7f0000000180)=0x14)
r7 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2)
socket$inet6(0xa, 0x80000, 0x35)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r6, @in={{0x2, 0x0, @remote}}, 0x5, 0x0, 0x6, 0x0, 0x12}, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)

13:48:30 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r3, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, &(0x7f0000000300))
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0x7, 0x872, 0x3, 0x1, 0x7ff, 0x10000, 0x0, 0x9a7f, 0x9, 0x101, 0x33d, 0x4, 0x0, 0x7, 0x5]}, &(0x7f0000000340)=0x100)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r5, 0x0, 0x40000, 0x4)
fallocate(r4, 0x0, 0x0, 0x110001)
fdatasync(r5)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xd000000, r5, 0x0, 0x8})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={<r6=>0x0, 0x352b, 0x8001, 0x4}, &(0x7f0000000180)=0x14)
r7 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2)
socket$inet6(0xa, 0x80000, 0x35)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r6, @in={{0x2, 0x0, @remote}}, 0x5, 0x0, 0x6, 0x0, 0x12}, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)

13:48:30 executing program 2:
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x29cb5a25, &(0x7f0000000340), 0x0, 0x0, 0xffbe}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21})
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
getdents(r0, &(0x7f0000000040)=""/46, 0x2e)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
getpriority(0x0, 0x0)
ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$dri(0x0, 0x36a7, 0x0)
syz_open_dev$vbi(0x0, 0x0, 0x2)
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0xd2eea2144d243798)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')

13:48:30 executing program 3:
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x29cb5a25, &(0x7f0000000340), 0x0, 0x0, 0xffbe}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21})
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
getdents(r0, &(0x7f0000000040)=""/46, 0x2e)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
getpriority(0x0, 0x0)
ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$dri(0x0, 0x36a7, 0x0)
syz_open_dev$vbi(0x0, 0x0, 0x2)
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0xd2eea2144d243798)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')

13:48:30 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r3, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, &(0x7f0000000300))
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0x7, 0x872, 0x3, 0x1, 0x7ff, 0x10000, 0x0, 0x9a7f, 0x9, 0x101, 0x33d, 0x4, 0x0, 0x7, 0x5]}, &(0x7f0000000340)=0x100)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r5, 0x0, 0x40000, 0x4)
fallocate(r4, 0x0, 0x0, 0x110001)
fdatasync(r5)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xd000000, r5, 0x0, 0x8})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={<r6=>0x0, 0x352b, 0x8001, 0x4}, &(0x7f0000000180)=0x14)
r7 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2)
socket$inet6(0xa, 0x80000, 0x35)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r6, @in={{0x2, 0x0, @remote}}, 0x5, 0x0, 0x6, 0x0, 0x12}, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)

13:48:30 executing program 3:
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x29cb5a25, &(0x7f0000000340), 0x0, 0x0, 0xffbe}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21})
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
getdents(r0, &(0x7f0000000040)=""/46, 0x2e)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
getpriority(0x0, 0x0)
ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$dri(0x0, 0x36a7, 0x0)
syz_open_dev$vbi(0x0, 0x0, 0x2)
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0xd2eea2144d243798)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')

13:48:30 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r3, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, &(0x7f0000000300))
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0x7, 0x872, 0x3, 0x1, 0x7ff, 0x10000, 0x0, 0x9a7f, 0x9, 0x101, 0x33d, 0x4, 0x0, 0x7, 0x5]}, &(0x7f0000000340)=0x100)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r5, 0x0, 0x40000, 0x4)
fallocate(r4, 0x0, 0x0, 0x110001)
fdatasync(r5)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xd000000, r5, 0x0, 0x8})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={<r6=>0x0, 0x352b, 0x8001, 0x4}, &(0x7f0000000180)=0x14)
r7 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2)
socket$inet6(0xa, 0x80000, 0x35)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r6, @in={{0x2, 0x0, @remote}}, 0x5, 0x0, 0x6, 0x0, 0x12}, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)

13:48:30 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r3, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, &(0x7f0000000300))
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0x7, 0x872, 0x3, 0x1, 0x7ff, 0x10000, 0x0, 0x9a7f, 0x9, 0x101, 0x33d, 0x4, 0x0, 0x7, 0x5]}, &(0x7f0000000340)=0x100)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r5, 0x0, 0x40000, 0x4)
fallocate(r4, 0x0, 0x0, 0x110001)
fdatasync(r5)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xd000000, r5, 0x0, 0x8})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={<r6=>0x0, 0x352b, 0x8001, 0x4}, &(0x7f0000000180)=0x14)
r7 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2)
socket$inet6(0xa, 0x80000, 0x35)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r6, @in={{0x2, 0x0, @remote}}, 0x5, 0x0, 0x6, 0x0, 0x12}, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)

13:48:30 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r3, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, &(0x7f0000000300))
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0x7, 0x872, 0x3, 0x1, 0x7ff, 0x10000, 0x0, 0x9a7f, 0x9, 0x101, 0x33d, 0x4, 0x0, 0x7, 0x5]}, &(0x7f0000000340)=0x100)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r5, 0x0, 0x40000, 0x4)
fallocate(r4, 0x0, 0x0, 0x110001)
fdatasync(r5)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xd000000, r5, 0x0, 0x8})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={<r6=>0x0, 0x352b, 0x8001, 0x4}, &(0x7f0000000180)=0x14)
r7 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2)
socket$inet6(0xa, 0x80000, 0x35)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r6, @in={{0x2, 0x0, @remote}}, 0x5, 0x0, 0x6, 0x0, 0x12}, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)

13:48:30 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r3, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, &(0x7f0000000300))
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0x7, 0x872, 0x3, 0x1, 0x7ff, 0x10000, 0x0, 0x9a7f, 0x9, 0x101, 0x33d, 0x4, 0x0, 0x7, 0x5]}, &(0x7f0000000340)=0x100)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r5, 0x0, 0x40000, 0x4)
fallocate(r4, 0x0, 0x0, 0x110001)
fdatasync(r5)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xd000000, r5, 0x0, 0x8})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={<r6=>0x0, 0x352b, 0x8001, 0x4}, &(0x7f0000000180)=0x14)
r7 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2)
socket$inet6(0xa, 0x80000, 0x35)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r6, @in={{0x2, 0x0, @remote}}, 0x5, 0x0, 0x6, 0x0, 0x12}, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)

13:48:31 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r3, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, &(0x7f0000000300))
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0x7, 0x872, 0x3, 0x1, 0x7ff, 0x10000, 0x0, 0x9a7f, 0x9, 0x101, 0x33d, 0x4, 0x0, 0x7, 0x5]}, &(0x7f0000000340)=0x100)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r5, 0x0, 0x40000, 0x4)
fallocate(r4, 0x0, 0x0, 0x110001)
fdatasync(r5)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xd000000, r5, 0x0, 0x8})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={<r6=>0x0, 0x352b, 0x8001, 0x4}, &(0x7f0000000180)=0x14)
r7 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2)
socket$inet6(0xa, 0x80000, 0x35)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r6, @in={{0x2, 0x0, @remote}}, 0x5, 0x0, 0x6, 0x0, 0x12}, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)

13:48:31 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r3, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, &(0x7f0000000300))
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0x7, 0x872, 0x3, 0x1, 0x7ff, 0x10000, 0x0, 0x9a7f, 0x9, 0x101, 0x33d, 0x4, 0x0, 0x7, 0x5]}, &(0x7f0000000340)=0x100)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r5, 0x0, 0x40000, 0x4)
fallocate(r4, 0x0, 0x0, 0x110001)
fdatasync(r5)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xd000000, r5, 0x0, 0x8})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={<r6=>0x0, 0x352b, 0x8001, 0x4}, &(0x7f0000000180)=0x14)
r7 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2)
socket$inet6(0xa, 0x80000, 0x35)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r6, @in={{0x2, 0x0, @remote}}, 0x5, 0x0, 0x6, 0x0, 0x12}, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)

13:48:31 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r3, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, &(0x7f0000000300))
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0x7, 0x872, 0x3, 0x1, 0x7ff, 0x10000, 0x0, 0x9a7f, 0x9, 0x101, 0x33d, 0x4, 0x0, 0x7, 0x5]}, &(0x7f0000000340)=0x100)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r5, 0x0, 0x40000, 0x4)
fallocate(r4, 0x0, 0x0, 0x110001)
fdatasync(r5)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xd000000, r5, 0x0, 0x8})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={<r6=>0x0, 0x352b, 0x8001, 0x4}, &(0x7f0000000180)=0x14)
r7 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2)
socket$inet6(0xa, 0x80000, 0x35)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r6, @in={{0x2, 0x0, @remote}}, 0x5, 0x0, 0x6, 0x0, 0x12}, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)

13:48:31 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r3, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, &(0x7f0000000300))
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0x7, 0x872, 0x3, 0x1, 0x7ff, 0x10000, 0x0, 0x9a7f, 0x9, 0x101, 0x33d, 0x4, 0x0, 0x7, 0x5]}, &(0x7f0000000340)=0x100)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r5, 0x0, 0x40000, 0x4)
fallocate(r4, 0x0, 0x0, 0x110001)
fdatasync(r5)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xd000000, r5, 0x0, 0x8})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={<r6=>0x0, 0x352b, 0x8001, 0x4}, &(0x7f0000000180)=0x14)
r7 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2)
socket$inet6(0xa, 0x80000, 0x35)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r6, @in={{0x2, 0x0, @remote}}, 0x5, 0x0, 0x6, 0x0, 0x12}, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)

13:48:31 executing program 1:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00')
exit(0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92v\xf9\xba\xf4\x12\r\"^\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea\x00'/247)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x1f7)

13:48:32 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r3, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, &(0x7f0000000300))
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0x7, 0x872, 0x3, 0x1, 0x7ff, 0x10000, 0x0, 0x9a7f, 0x9, 0x101, 0x33d, 0x4, 0x0, 0x7, 0x5]}, &(0x7f0000000340)=0x100)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r5, 0x0, 0x40000, 0x4)
fallocate(r4, 0x0, 0x0, 0x110001)
fdatasync(r5)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xd000000, r5, 0x0, 0x8})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={<r6=>0x0, 0x352b, 0x8001, 0x4}, &(0x7f0000000180)=0x14)
r7 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2)
socket$inet6(0xa, 0x80000, 0x35)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r6, @in={{0x2, 0x0, @remote}}, 0x5, 0x0, 0x6, 0x0, 0x12}, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)

13:48:32 executing program 1:
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2)
r0 = syz_open_dev$swradio(0x0, 0x1, 0x2)
epoll_create1(0x80000)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff})
accept4$vsock_stream(r2, &(0x7f0000000740), 0x10, 0x800)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000002c0)={0x26, 0x0, 0x4, 0x20, {}, {0x3, 0xc, 0xd, 0x0, 0xffff, 0x3, "f2f2a35d"}, 0x0, 0x1, @fd=<r4=>r3, 0x4})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu//.z1\x8c', 0x1ff)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="2321202e2f66696c6530202e2f6367726f75702e6e65742f73797a3100202e2f6367726f75702e6370752f2e797a3100204073797374656d5e20706f72743000202728407365637572697479232b5b207573657200205d206386ff0f0000000000006465765e63707573657473656c662547504c0a33e5d53c6170fc22cf15c1c61873b54884d55f9f74be9305d0097e7777a3757f89897750ed5ddb939da9cbdb487b0e710eeda73058c09ef1694239daa01f5f055c2e485b0942a32f5bff951d6c0a3b2126"], 0xc6)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80080, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009})
prctl$PR_SET_MM(0x23, 0xc12f356e2b198f51, &(0x7f0000ffb000/0x3000)=nil)
r6 = add_key$user(&(0x7f0000000240)='user\x00', 0x0, &(0x7f00000003c0)="f1d6275ef617a6431d89429288e0ac455d00867174541165cd16bb6d1e0c518e99686266942a368982062f14bf14b371f7c145615ce8b80270dfb3cfb2b3ba99b194f601cb40eb1d7d5a61c930794e97bbf467400a2607be65ddd8e7d0e6e8ad3dbe1a058f0bfa935f8e000cfc89ab0a680ce1995c79c96d75ffed5fa0c3ea145c05b486edff5720e527ffa7fb16edc136bc8f270eeed4ad3842ae9f912c747bdbd65923ce3ffd193d15d09649f199b4a3133e8b44b04c2f554be4fc296fca5132726b13685477328045", 0xca, 0xfffffffffffffffd)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000004c0)={r6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="088237799872f2")
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000700)=0x8001, 0xfffffffffffffc5e)
write$binfmt_script(r7, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e2f66696c6530202224200a8d78a8da80e9c697ea8c67c83c600062d5e6abf3bdfe67183c93d3ede4e0d97734630f72d2d31d7d567651ab67d8b87a2e891392eb399cc9dc6743e4dad0fe06c5d43893f0e060e53c0523ff7377f28931899667b3ad8d084938fe8f7ae823f5813b62ad73274d000b2a56f060ede63ffaba904cbcc8f373cec0f407597d5f808a1f6331a310d75063ea796579117be6cda8cc01e4936df71402ece51429d694a7"], 0xbe)
r8 = socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000200)=0xa7)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A')
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000540)={{0x10000b}, 'port0\x00', 0x41, 0x11020, 0x7f, 0x3, 0x7fff, 0x3, 0x6f25, 0x0, 0x2, 0x8001})
syz_open_dev$mouse(0x0, 0x81, 0x200)
r9 = dup2(0xffffffffffffffff, r4)
r10 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r10, 0x6)
r11 = socket$inet(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
write$cgroup_subtree(r9, &(0x7f00000008c0)=ANY=[], 0xffffffffffffffea)
syz_open_dev$evdev(&(0x7f0000000780)='/dev/input/event#\x00', 0x5, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)

13:48:32 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r3, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, &(0x7f0000000300))
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0x7, 0x872, 0x3, 0x1, 0x7ff, 0x10000, 0x0, 0x9a7f, 0x9, 0x101, 0x33d, 0x4, 0x0, 0x7, 0x5]}, &(0x7f0000000340)=0x100)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r5, 0x0, 0x40000, 0x4)
fallocate(r4, 0x0, 0x0, 0x110001)
fdatasync(r5)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xd000000, r5, 0x0, 0x8})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={<r6=>0x0, 0x352b, 0x8001, 0x4}, &(0x7f0000000180)=0x14)
r7 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2)
socket$inet6(0xa, 0x80000, 0x35)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r6, @in={{0x2, 0x0, @remote}}, 0x5, 0x0, 0x6, 0x0, 0x12}, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)

13:48:32 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r3, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, &(0x7f0000000300))
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0x7, 0x872, 0x3, 0x1, 0x7ff, 0x10000, 0x0, 0x9a7f, 0x9, 0x101, 0x33d, 0x4, 0x0, 0x7, 0x5]}, &(0x7f0000000340)=0x100)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r5, 0x0, 0x40000, 0x4)
fallocate(r4, 0x0, 0x0, 0x110001)
fdatasync(r5)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xd000000, r5, 0x0, 0x8})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={<r6=>0x0, 0x352b, 0x8001, 0x4}, &(0x7f0000000180)=0x14)
r7 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2)
socket$inet6(0xa, 0x80000, 0x35)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r6, @in={{0x2, 0x0, @remote}}, 0x5, 0x0, 0x6, 0x0, 0x12}, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)

13:48:32 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r3, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, &(0x7f0000000300))
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0x7, 0x872, 0x3, 0x1, 0x7ff, 0x10000, 0x0, 0x9a7f, 0x9, 0x101, 0x33d, 0x4, 0x0, 0x7, 0x5]}, &(0x7f0000000340)=0x100)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r5, 0x0, 0x40000, 0x4)
fallocate(r4, 0x0, 0x0, 0x110001)
fdatasync(r5)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xd000000, r5, 0x0, 0x8})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={<r6=>0x0, 0x352b, 0x8001, 0x4}, &(0x7f0000000180)=0x14)
r7 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2)
socket$inet6(0xa, 0x80000, 0x35)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r6, @in={{0x2, 0x0, @remote}}, 0x5, 0x0, 0x6, 0x0, 0x12}, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)

[  615.451605][T15715] device nr0
 entered promiscuous mode
13:48:32 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0xf}}, &(0x7f0000014ff5)='syzka\x00\x00\x00\x05\x00\xf3', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48)

13:48:32 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0x9}, [@typed={0x8, 0x3, @ipv4=@dev}]}, 0x1c}}, 0x0)

13:48:33 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB], 0x2}}, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000001680)='team\x00')
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0)
getsockname$packet(r2, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x38}}, 0x0)

13:48:33 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0x540d, 0x0)

[  616.148956][T15715] device nr0
 entered promiscuous mode
13:48:33 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000200)={0x7ff}, 0x10)
write(r0, &(0x7f0000000ac0)="1c0000001a009b8a14e5f46b000000ff00000000fd02000000020000", 0x1c)

13:48:33 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r3, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, &(0x7f0000000300))
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0x7, 0x872, 0x3, 0x1, 0x7ff, 0x10000, 0x0, 0x9a7f, 0x9, 0x101, 0x33d, 0x4, 0x0, 0x7, 0x5]}, &(0x7f0000000340)=0x100)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r5, 0x0, 0x40000, 0x4)
fallocate(r4, 0x0, 0x0, 0x110001)
fdatasync(r5)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xd000000, r5, 0x0, 0x8})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={<r6=>0x0, 0x352b, 0x8001, 0x4}, &(0x7f0000000180)=0x14)
r7 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2)
socket$inet6(0xa, 0x80000, 0x35)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r6, @in={{0x2, 0x0, @remote}}, 0x5, 0x0, 0x6, 0x0, 0x12}, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)

13:48:33 executing program 1:
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2)
r0 = syz_open_dev$swradio(0x0, 0x1, 0x2)
epoll_create1(0x80000)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff})
accept4$vsock_stream(r2, &(0x7f0000000740), 0x10, 0x800)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000002c0)={0x26, 0x0, 0x4, 0x20, {}, {0x3, 0xc, 0xd, 0x0, 0xffff, 0x3, "f2f2a35d"}, 0x0, 0x1, @fd=<r4=>r3, 0x4})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu//.z1\x8c', 0x1ff)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="2321202e2f66696c6530202e2f6367726f75702e6e65742f73797a3100202e2f6367726f75702e6370752f2e797a3100204073797374656d5e20706f72743000202728407365637572697479232b5b207573657200205d206386ff0f0000000000006465765e63707573657473656c662547504c0a33e5d53c6170fc22cf15c1c61873b54884d55f9f74be9305d0097e7777a3757f89897750ed5ddb939da9cbdb487b0e710eeda73058c09ef1694239daa01f5f055c2e485b0942a32f5bff951d6c0a3b2126"], 0xc6)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80080, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009})
prctl$PR_SET_MM(0x23, 0xc12f356e2b198f51, &(0x7f0000ffb000/0x3000)=nil)
r6 = add_key$user(&(0x7f0000000240)='user\x00', 0x0, &(0x7f00000003c0)="f1d6275ef617a6431d89429288e0ac455d00867174541165cd16bb6d1e0c518e99686266942a368982062f14bf14b371f7c145615ce8b80270dfb3cfb2b3ba99b194f601cb40eb1d7d5a61c930794e97bbf467400a2607be65ddd8e7d0e6e8ad3dbe1a058f0bfa935f8e000cfc89ab0a680ce1995c79c96d75ffed5fa0c3ea145c05b486edff5720e527ffa7fb16edc136bc8f270eeed4ad3842ae9f912c747bdbd65923ce3ffd193d15d09649f199b4a3133e8b44b04c2f554be4fc296fca5132726b13685477328045", 0xca, 0xfffffffffffffffd)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000004c0)={r6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="088237799872f2")
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000700)=0x8001, 0xfffffffffffffc5e)
write$binfmt_script(r7, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e2f66696c6530202224200a8d78a8da80e9c697ea8c67c83c600062d5e6abf3bdfe67183c93d3ede4e0d97734630f72d2d31d7d567651ab67d8b87a2e891392eb399cc9dc6743e4dad0fe06c5d43893f0e060e53c0523ff7377f28931899667b3ad8d084938fe8f7ae823f5813b62ad73274d000b2a56f060ede63ffaba904cbcc8f373cec0f407597d5f808a1f6331a310d75063ea796579117be6cda8cc01e4936df71402ece51429d694a7"], 0xbe)
r8 = socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000200)=0xa7)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A')
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000540)={{0x10000b}, 'port0\x00', 0x41, 0x11020, 0x7f, 0x3, 0x7fff, 0x3, 0x6f25, 0x0, 0x2, 0x8001})
syz_open_dev$mouse(0x0, 0x81, 0x200)
r9 = dup2(0xffffffffffffffff, r4)
r10 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r10, 0x6)
r11 = socket$inet(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
write$cgroup_subtree(r9, &(0x7f00000008c0)=ANY=[], 0xffffffffffffffea)
syz_open_dev$evdev(&(0x7f0000000780)='/dev/input/event#\x00', 0x5, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)

13:48:33 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r3, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, &(0x7f0000000300))
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0x7, 0x872, 0x3, 0x1, 0x7ff, 0x10000, 0x0, 0x9a7f, 0x9, 0x101, 0x33d, 0x4, 0x0, 0x7, 0x5]}, &(0x7f0000000340)=0x100)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r5, 0x0, 0x40000, 0x4)
fallocate(r4, 0x0, 0x0, 0x110001)
fdatasync(r5)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xd000000, r5, 0x0, 0x8})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={<r6=>0x0, 0x352b, 0x8001, 0x4}, &(0x7f0000000180)=0x14)
r7 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2)
socket$inet6(0xa, 0x80000, 0x35)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r6, @in={{0x2, 0x0, @remote}}, 0x5, 0x0, 0x6, 0x0, 0x12}, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)

13:48:33 executing program 4:
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2)
r0 = syz_open_dev$swradio(0x0, 0x1, 0x2)
epoll_create1(0x80000)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff})
accept4$vsock_stream(r2, &(0x7f0000000740), 0x10, 0x800)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000002c0)={0x26, 0x0, 0x4, 0x20, {}, {0x3, 0xc, 0xd, 0x0, 0xffff, 0x3, "f2f2a35d"}, 0x0, 0x1, @fd=<r4=>r3, 0x4})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu//.z1\x8c', 0x1ff)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="2321202e2f66696c6530202e2f6367726f75702e6e65742f73797a3100202e2f6367726f75702e6370752f2e797a3100204073797374656d5e20706f72743000202728407365637572697479232b5b207573657200205d206386ff0f0000000000006465765e63707573657473656c662547504c0a33e5d53c6170fc22cf15c1c61873b54884d55f9f74be9305d0097e7777a3757f89897750ed5ddb939da9cbdb487b0e710eeda73058c09ef1694239daa01f5f055c2e485b0942a32f5bff951d6c0a3b2126"], 0xc6)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80080, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009})
prctl$PR_SET_MM(0x23, 0xc12f356e2b198f51, &(0x7f0000ffb000/0x3000)=nil)
r6 = add_key$user(&(0x7f0000000240)='user\x00', 0x0, &(0x7f00000003c0)="f1d6275ef617a6431d89429288e0ac455d00867174541165cd16bb6d1e0c518e99686266942a368982062f14bf14b371f7c145615ce8b80270dfb3cfb2b3ba99b194f601cb40eb1d7d5a61c930794e97bbf467400a2607be65ddd8e7d0e6e8ad3dbe1a058f0bfa935f8e000cfc89ab0a680ce1995c79c96d75ffed5fa0c3ea145c05b486edff5720e527ffa7fb16edc136bc8f270eeed4ad3842ae9f912c747bdbd65923ce3ffd193d15d09649f199b4a3133e8b44b04c2f554be4fc296fca5132726b13685477328045", 0xca, 0xfffffffffffffffd)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000004c0)={r6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="088237799872f2")
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000700)=0x8001, 0xfffffffffffffc5e)
write$binfmt_script(r7, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e2f66696c6530202224200a8d78a8da80e9c697ea8c67c83c600062d5e6abf3bdfe67183c93d3ede4e0d97734630f72d2d31d7d567651ab67d8b87a2e891392eb399cc9dc6743e4dad0fe06c5d43893f0e060e53c0523ff7377f28931899667b3ad8d084938fe8f7ae823f5813b62ad73274d000b2a56f060ede63ffaba904cbcc8f373cec0f407597d5f808a1f6331a310d75063ea796579117be6cda8cc01e4936df71402ece51429d694a7"], 0xbe)
r8 = socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000200)=0xa7)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A')
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000540)={{0x10000b}, 'port0\x00', 0x41, 0x11020, 0x7f, 0x3, 0x7fff, 0x3, 0x6f25, 0x0, 0x2, 0x8001})
syz_open_dev$mouse(0x0, 0x81, 0x200)
r9 = dup2(0xffffffffffffffff, r4)
r10 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r10, 0x6)
r11 = socket$inet(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
write$cgroup_subtree(r9, &(0x7f00000008c0)=ANY=[], 0xffffffffffffffea)
syz_open_dev$evdev(&(0x7f0000000780)='/dev/input/event#\x00', 0x5, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)

13:48:33 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000200)={0x7ff}, 0x10)
write(r0, &(0x7f0000000ac0)="1c0000001a009b8a14e5f46b000000ff00000000fd02000000020000", 0x1c)

13:48:33 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB], 0x2}}, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000001680)='team\x00')
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0)
getsockname$packet(r2, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x38}}, 0x0)

[  616.913704][T15769] device nr0
 entered promiscuous mode
13:48:34 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000200)={0x7ff}, 0x10)
write(r0, &(0x7f0000000ac0)="1c0000001a009b8a14e5f46b000000ff00000000fd02000000020000", 0x1c)

13:48:34 executing program 3:
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2)
r0 = syz_open_dev$swradio(0x0, 0x1, 0x2)
epoll_create1(0x80000)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff})
accept4$vsock_stream(r2, &(0x7f0000000740), 0x10, 0x800)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000002c0)={0x26, 0x0, 0x4, 0x20, {}, {0x3, 0xc, 0xd, 0x0, 0xffff, 0x3, "f2f2a35d"}, 0x0, 0x1, @fd=<r4=>r3, 0x4})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu//.z1\x8c', 0x1ff)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="2321202e2f66696c6530202e2f6367726f75702e6e65742f73797a3100202e2f6367726f75702e6370752f2e797a3100204073797374656d5e20706f72743000202728407365637572697479232b5b207573657200205d206386ff0f0000000000006465765e63707573657473656c662547504c0a33e5d53c6170fc22cf15c1c61873b54884d55f9f74be9305d0097e7777a3757f89897750ed5ddb939da9cbdb487b0e710eeda73058c09ef1694239daa01f5f055c2e485b0942a32f5bff951d6c0a3b2126"], 0xc6)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80080, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009})
prctl$PR_SET_MM(0x23, 0xc12f356e2b198f51, &(0x7f0000ffb000/0x3000)=nil)
r6 = add_key$user(&(0x7f0000000240)='user\x00', 0x0, &(0x7f00000003c0)="f1d6275ef617a6431d89429288e0ac455d00867174541165cd16bb6d1e0c518e99686266942a368982062f14bf14b371f7c145615ce8b80270dfb3cfb2b3ba99b194f601cb40eb1d7d5a61c930794e97bbf467400a2607be65ddd8e7d0e6e8ad3dbe1a058f0bfa935f8e000cfc89ab0a680ce1995c79c96d75ffed5fa0c3ea145c05b486edff5720e527ffa7fb16edc136bc8f270eeed4ad3842ae9f912c747bdbd65923ce3ffd193d15d09649f199b4a3133e8b44b04c2f554be4fc296fca5132726b13685477328045", 0xca, 0xfffffffffffffffd)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000004c0)={r6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="088237799872f2")
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000700)=0x8001, 0xfffffffffffffc5e)
write$binfmt_script(r7, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e2f66696c6530202224200a8d78a8da80e9c697ea8c67c83c600062d5e6abf3bdfe67183c93d3ede4e0d97734630f72d2d31d7d567651ab67d8b87a2e891392eb399cc9dc6743e4dad0fe06c5d43893f0e060e53c0523ff7377f28931899667b3ad8d084938fe8f7ae823f5813b62ad73274d000b2a56f060ede63ffaba904cbcc8f373cec0f407597d5f808a1f6331a310d75063ea796579117be6cda8cc01e4936df71402ece51429d694a7"], 0xbe)
r8 = socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000200)=0xa7)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A')
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000540)={{0x10000b}, 'port0\x00', 0x41, 0x11020, 0x7f, 0x3, 0x7fff, 0x3, 0x6f25, 0x0, 0x2, 0x8001})
syz_open_dev$mouse(0x0, 0x81, 0x200)
r9 = dup2(0xffffffffffffffff, r4)
r10 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r10, 0x6)
r11 = socket$inet(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
write$cgroup_subtree(r9, &(0x7f00000008c0)=ANY=[], 0xffffffffffffffea)
syz_open_dev$evdev(&(0x7f0000000780)='/dev/input/event#\x00', 0x5, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)

13:48:34 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB], 0x2}}, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000001680)='team\x00')
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0)
getsockname$packet(r2, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x38}}, 0x0)

[  617.269344][T15766] device nr0
 entered promiscuous mode
13:48:34 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000200)={0x7ff}, 0x10)
write(r0, &(0x7f0000000ac0)="1c0000001a009b8a14e5f46b000000ff00000000fd02000000020000", 0x1c)

13:48:34 executing program 0:
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2)
r0 = syz_open_dev$swradio(0x0, 0x1, 0x2)
epoll_create1(0x80000)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff})
accept4$vsock_stream(r2, &(0x7f0000000740), 0x10, 0x800)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000002c0)={0x26, 0x0, 0x4, 0x20, {}, {0x3, 0xc, 0xd, 0x0, 0xffff, 0x3, "f2f2a35d"}, 0x0, 0x1, @fd=<r4=>r3, 0x4})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu//.z1\x8c', 0x1ff)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="2321202e2f66696c6530202e2f6367726f75702e6e65742f73797a3100202e2f6367726f75702e6370752f2e797a3100204073797374656d5e20706f72743000202728407365637572697479232b5b207573657200205d206386ff0f0000000000006465765e63707573657473656c662547504c0a33e5d53c6170fc22cf15c1c61873b54884d55f9f74be9305d0097e7777a3757f89897750ed5ddb939da9cbdb487b0e710eeda73058c09ef1694239daa01f5f055c2e485b0942a32f5bff951d6c0a3b2126"], 0xc6)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80080, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009})
prctl$PR_SET_MM(0x23, 0xc12f356e2b198f51, &(0x7f0000ffb000/0x3000)=nil)
r6 = add_key$user(&(0x7f0000000240)='user\x00', 0x0, &(0x7f00000003c0)="f1d6275ef617a6431d89429288e0ac455d00867174541165cd16bb6d1e0c518e99686266942a368982062f14bf14b371f7c145615ce8b80270dfb3cfb2b3ba99b194f601cb40eb1d7d5a61c930794e97bbf467400a2607be65ddd8e7d0e6e8ad3dbe1a058f0bfa935f8e000cfc89ab0a680ce1995c79c96d75ffed5fa0c3ea145c05b486edff5720e527ffa7fb16edc136bc8f270eeed4ad3842ae9f912c747bdbd65923ce3ffd193d15d09649f199b4a3133e8b44b04c2f554be4fc296fca5132726b13685477328045", 0xca, 0xfffffffffffffffd)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000004c0)={r6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="088237799872f2")
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000700)=0x8001, 0xfffffffffffffc5e)
write$binfmt_script(r7, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e2f66696c6530202224200a8d78a8da80e9c697ea8c67c83c600062d5e6abf3bdfe67183c93d3ede4e0d97734630f72d2d31d7d567651ab67d8b87a2e891392eb399cc9dc6743e4dad0fe06c5d43893f0e060e53c0523ff7377f28931899667b3ad8d084938fe8f7ae823f5813b62ad73274d000b2a56f060ede63ffaba904cbcc8f373cec0f407597d5f808a1f6331a310d75063ea796579117be6cda8cc01e4936df71402ece51429d694a7"], 0xbe)
r8 = socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000200)=0xa7)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A')
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000540)={{0x10000b}, 'port0\x00', 0x41, 0x11020, 0x7f, 0x3, 0x7fff, 0x3, 0x6f25, 0x0, 0x2, 0x8001})
syz_open_dev$mouse(0x0, 0x81, 0x200)
r9 = dup2(0xffffffffffffffff, r4)
r10 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r10, 0x6)
r11 = socket$inet(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
write$cgroup_subtree(r9, &(0x7f00000008c0)=ANY=[], 0xffffffffffffffea)
syz_open_dev$evdev(&(0x7f0000000780)='/dev/input/event#\x00', 0x5, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)

13:48:34 executing program 4:
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2)
r0 = syz_open_dev$swradio(0x0, 0x1, 0x2)
epoll_create1(0x80000)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff})
accept4$vsock_stream(r2, &(0x7f0000000740), 0x10, 0x800)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000002c0)={0x26, 0x0, 0x4, 0x20, {}, {0x3, 0xc, 0xd, 0x0, 0xffff, 0x3, "f2f2a35d"}, 0x0, 0x1, @fd=<r4=>r3, 0x4})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu//.z1\x8c', 0x1ff)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="2321202e2f66696c6530202e2f6367726f75702e6e65742f73797a3100202e2f6367726f75702e6370752f2e797a3100204073797374656d5e20706f72743000202728407365637572697479232b5b207573657200205d206386ff0f0000000000006465765e63707573657473656c662547504c0a33e5d53c6170fc22cf15c1c61873b54884d55f9f74be9305d0097e7777a3757f89897750ed5ddb939da9cbdb487b0e710eeda73058c09ef1694239daa01f5f055c2e485b0942a32f5bff951d6c0a3b2126"], 0xc6)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80080, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009})
prctl$PR_SET_MM(0x23, 0xc12f356e2b198f51, &(0x7f0000ffb000/0x3000)=nil)
r6 = add_key$user(&(0x7f0000000240)='user\x00', 0x0, &(0x7f00000003c0)="f1d6275ef617a6431d89429288e0ac455d00867174541165cd16bb6d1e0c518e99686266942a368982062f14bf14b371f7c145615ce8b80270dfb3cfb2b3ba99b194f601cb40eb1d7d5a61c930794e97bbf467400a2607be65ddd8e7d0e6e8ad3dbe1a058f0bfa935f8e000cfc89ab0a680ce1995c79c96d75ffed5fa0c3ea145c05b486edff5720e527ffa7fb16edc136bc8f270eeed4ad3842ae9f912c747bdbd65923ce3ffd193d15d09649f199b4a3133e8b44b04c2f554be4fc296fca5132726b13685477328045", 0xca, 0xfffffffffffffffd)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000004c0)={r6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="088237799872f2")
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000700)=0x8001, 0xfffffffffffffc5e)
write$binfmt_script(r7, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e2f66696c6530202224200a8d78a8da80e9c697ea8c67c83c600062d5e6abf3bdfe67183c93d3ede4e0d97734630f72d2d31d7d567651ab67d8b87a2e891392eb399cc9dc6743e4dad0fe06c5d43893f0e060e53c0523ff7377f28931899667b3ad8d084938fe8f7ae823f5813b62ad73274d000b2a56f060ede63ffaba904cbcc8f373cec0f407597d5f808a1f6331a310d75063ea796579117be6cda8cc01e4936df71402ece51429d694a7"], 0xbe)
r8 = socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000200)=0xa7)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A')
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000540)={{0x10000b}, 'port0\x00', 0x41, 0x11020, 0x7f, 0x3, 0x7fff, 0x3, 0x6f25, 0x0, 0x2, 0x8001})
syz_open_dev$mouse(0x0, 0x81, 0x200)
r9 = dup2(0xffffffffffffffff, r4)
r10 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r10, 0x6)
r11 = socket$inet(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
write$cgroup_subtree(r9, &(0x7f00000008c0)=ANY=[], 0xffffffffffffffea)
syz_open_dev$evdev(&(0x7f0000000780)='/dev/input/event#\x00', 0x5, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)

13:48:34 executing program 2:
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2)
r0 = syz_open_dev$swradio(0x0, 0x1, 0x2)
epoll_create1(0x80000)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff})
accept4$vsock_stream(r2, &(0x7f0000000740), 0x10, 0x800)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000002c0)={0x26, 0x0, 0x4, 0x20, {}, {0x3, 0xc, 0xd, 0x0, 0xffff, 0x3, "f2f2a35d"}, 0x0, 0x1, @fd=<r4=>r3, 0x4})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu//.z1\x8c', 0x1ff)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="2321202e2f66696c6530202e2f6367726f75702e6e65742f73797a3100202e2f6367726f75702e6370752f2e797a3100204073797374656d5e20706f72743000202728407365637572697479232b5b207573657200205d206386ff0f0000000000006465765e63707573657473656c662547504c0a33e5d53c6170fc22cf15c1c61873b54884d55f9f74be9305d0097e7777a3757f89897750ed5ddb939da9cbdb487b0e710eeda73058c09ef1694239daa01f5f055c2e485b0942a32f5bff951d6c0a3b2126"], 0xc6)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80080, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009})
prctl$PR_SET_MM(0x23, 0xc12f356e2b198f51, &(0x7f0000ffb000/0x3000)=nil)
r6 = add_key$user(&(0x7f0000000240)='user\x00', 0x0, &(0x7f00000003c0)="f1d6275ef617a6431d89429288e0ac455d00867174541165cd16bb6d1e0c518e99686266942a368982062f14bf14b371f7c145615ce8b80270dfb3cfb2b3ba99b194f601cb40eb1d7d5a61c930794e97bbf467400a2607be65ddd8e7d0e6e8ad3dbe1a058f0bfa935f8e000cfc89ab0a680ce1995c79c96d75ffed5fa0c3ea145c05b486edff5720e527ffa7fb16edc136bc8f270eeed4ad3842ae9f912c747bdbd65923ce3ffd193d15d09649f199b4a3133e8b44b04c2f554be4fc296fca5132726b13685477328045", 0xca, 0xfffffffffffffffd)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000004c0)={r6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="088237799872f2")
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000700)=0x8001, 0xfffffffffffffc5e)
write$binfmt_script(r7, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e2f66696c6530202224200a8d78a8da80e9c697ea8c67c83c600062d5e6abf3bdfe67183c93d3ede4e0d97734630f72d2d31d7d567651ab67d8b87a2e891392eb399cc9dc6743e4dad0fe06c5d43893f0e060e53c0523ff7377f28931899667b3ad8d084938fe8f7ae823f5813b62ad73274d000b2a56f060ede63ffaba904cbcc8f373cec0f407597d5f808a1f6331a310d75063ea796579117be6cda8cc01e4936df71402ece51429d694a7"], 0xbe)
r8 = socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000200)=0xa7)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A')
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000540)={{0x10000b}, 'port0\x00', 0x41, 0x11020, 0x7f, 0x3, 0x7fff, 0x3, 0x6f25, 0x0, 0x2, 0x8001})
syz_open_dev$mouse(0x0, 0x81, 0x200)
r9 = dup2(0xffffffffffffffff, r4)
r10 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r10, 0x6)
r11 = socket$inet(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
write$cgroup_subtree(r9, &(0x7f00000008c0)=ANY=[], 0xffffffffffffffea)
syz_open_dev$evdev(&(0x7f0000000780)='/dev/input/event#\x00', 0x5, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)

13:48:34 executing program 1:
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2)
r0 = syz_open_dev$swradio(0x0, 0x1, 0x2)
epoll_create1(0x80000)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff})
accept4$vsock_stream(r2, &(0x7f0000000740), 0x10, 0x800)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000002c0)={0x26, 0x0, 0x4, 0x20, {}, {0x3, 0xc, 0xd, 0x0, 0xffff, 0x3, "f2f2a35d"}, 0x0, 0x1, @fd=<r4=>r3, 0x4})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu//.z1\x8c', 0x1ff)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="2321202e2f66696c6530202e2f6367726f75702e6e65742f73797a3100202e2f6367726f75702e6370752f2e797a3100204073797374656d5e20706f72743000202728407365637572697479232b5b207573657200205d206386ff0f0000000000006465765e63707573657473656c662547504c0a33e5d53c6170fc22cf15c1c61873b54884d55f9f74be9305d0097e7777a3757f89897750ed5ddb939da9cbdb487b0e710eeda73058c09ef1694239daa01f5f055c2e485b0942a32f5bff951d6c0a3b2126"], 0xc6)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80080, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009})
prctl$PR_SET_MM(0x23, 0xc12f356e2b198f51, &(0x7f0000ffb000/0x3000)=nil)
r6 = add_key$user(&(0x7f0000000240)='user\x00', 0x0, &(0x7f00000003c0)="f1d6275ef617a6431d89429288e0ac455d00867174541165cd16bb6d1e0c518e99686266942a368982062f14bf14b371f7c145615ce8b80270dfb3cfb2b3ba99b194f601cb40eb1d7d5a61c930794e97bbf467400a2607be65ddd8e7d0e6e8ad3dbe1a058f0bfa935f8e000cfc89ab0a680ce1995c79c96d75ffed5fa0c3ea145c05b486edff5720e527ffa7fb16edc136bc8f270eeed4ad3842ae9f912c747bdbd65923ce3ffd193d15d09649f199b4a3133e8b44b04c2f554be4fc296fca5132726b13685477328045", 0xca, 0xfffffffffffffffd)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000004c0)={r6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="088237799872f2")
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000700)=0x8001, 0xfffffffffffffc5e)
write$binfmt_script(r7, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e2f66696c6530202224200a8d78a8da80e9c697ea8c67c83c600062d5e6abf3bdfe67183c93d3ede4e0d97734630f72d2d31d7d567651ab67d8b87a2e891392eb399cc9dc6743e4dad0fe06c5d43893f0e060e53c0523ff7377f28931899667b3ad8d084938fe8f7ae823f5813b62ad73274d000b2a56f060ede63ffaba904cbcc8f373cec0f407597d5f808a1f6331a310d75063ea796579117be6cda8cc01e4936df71402ece51429d694a7"], 0xbe)
r8 = socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000200)=0xa7)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A')
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000540)={{0x10000b}, 'port0\x00', 0x41, 0x11020, 0x7f, 0x3, 0x7fff, 0x3, 0x6f25, 0x0, 0x2, 0x8001})
syz_open_dev$mouse(0x0, 0x81, 0x200)
r9 = dup2(0xffffffffffffffff, r4)
r10 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r10, 0x6)
r11 = socket$inet(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
write$cgroup_subtree(r9, &(0x7f00000008c0)=ANY=[], 0xffffffffffffffea)
syz_open_dev$evdev(&(0x7f0000000780)='/dev/input/event#\x00', 0x5, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)

13:48:34 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB], 0x2}}, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000001680)='team\x00')
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0)
getsockname$packet(r2, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x38}}, 0x0)

[  617.798955][T15804] device nr0
 entered promiscuous mode
[  617.925217][T15795] device nr0
 entered promiscuous mode
[  618.148757][T15819] device nr0
 entered promiscuous mode
13:48:35 executing program 5:
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2)
r0 = syz_open_dev$swradio(0x0, 0x1, 0x2)
epoll_create1(0x80000)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff})
accept4$vsock_stream(r2, &(0x7f0000000740), 0x10, 0x800)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000002c0)={0x26, 0x0, 0x4, 0x20, {}, {0x3, 0xc, 0xd, 0x0, 0xffff, 0x3, "f2f2a35d"}, 0x0, 0x1, @fd=<r4=>r3, 0x4})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu//.z1\x8c', 0x1ff)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="2321202e2f66696c6530202e2f6367726f75702e6e65742f73797a3100202e2f6367726f75702e6370752f2e797a3100204073797374656d5e20706f72743000202728407365637572697479232b5b207573657200205d206386ff0f0000000000006465765e63707573657473656c662547504c0a33e5d53c6170fc22cf15c1c61873b54884d55f9f74be9305d0097e7777a3757f89897750ed5ddb939da9cbdb487b0e710eeda73058c09ef1694239daa01f5f055c2e485b0942a32f5bff951d6c0a3b2126"], 0xc6)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80080, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009})
prctl$PR_SET_MM(0x23, 0xc12f356e2b198f51, &(0x7f0000ffb000/0x3000)=nil)
r6 = add_key$user(&(0x7f0000000240)='user\x00', 0x0, &(0x7f00000003c0)="f1d6275ef617a6431d89429288e0ac455d00867174541165cd16bb6d1e0c518e99686266942a368982062f14bf14b371f7c145615ce8b80270dfb3cfb2b3ba99b194f601cb40eb1d7d5a61c930794e97bbf467400a2607be65ddd8e7d0e6e8ad3dbe1a058f0bfa935f8e000cfc89ab0a680ce1995c79c96d75ffed5fa0c3ea145c05b486edff5720e527ffa7fb16edc136bc8f270eeed4ad3842ae9f912c747bdbd65923ce3ffd193d15d09649f199b4a3133e8b44b04c2f554be4fc296fca5132726b13685477328045", 0xca, 0xfffffffffffffffd)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000004c0)={r6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="088237799872f2")
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000700)=0x8001, 0xfffffffffffffc5e)
write$binfmt_script(r7, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e2f66696c6530202224200a8d78a8da80e9c697ea8c67c83c600062d5e6abf3bdfe67183c93d3ede4e0d97734630f72d2d31d7d567651ab67d8b87a2e891392eb399cc9dc6743e4dad0fe06c5d43893f0e060e53c0523ff7377f28931899667b3ad8d084938fe8f7ae823f5813b62ad73274d000b2a56f060ede63ffaba904cbcc8f373cec0f407597d5f808a1f6331a310d75063ea796579117be6cda8cc01e4936df71402ece51429d694a7"], 0xbe)
r8 = socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000200)=0xa7)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A')
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000540)={{0x10000b}, 'port0\x00', 0x41, 0x11020, 0x7f, 0x3, 0x7fff, 0x3, 0x6f25, 0x0, 0x2, 0x8001})
syz_open_dev$mouse(0x0, 0x81, 0x200)
r9 = dup2(0xffffffffffffffff, r4)
r10 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r10, 0x6)
r11 = socket$inet(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
write$cgroup_subtree(r9, &(0x7f00000008c0)=ANY=[], 0xffffffffffffffea)
syz_open_dev$evdev(&(0x7f0000000780)='/dev/input/event#\x00', 0x5, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)

[  618.376354][T15820] device nr0
 entered promiscuous mode
[  618.443980][T15823] device nr0
 entered promiscuous mode
13:48:35 executing program 3:
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2)
r0 = syz_open_dev$swradio(0x0, 0x1, 0x2)
epoll_create1(0x80000)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff})
accept4$vsock_stream(r2, &(0x7f0000000740), 0x10, 0x800)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000002c0)={0x26, 0x0, 0x4, 0x20, {}, {0x3, 0xc, 0xd, 0x0, 0xffff, 0x3, "f2f2a35d"}, 0x0, 0x1, @fd=<r4=>r3, 0x4})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu//.z1\x8c', 0x1ff)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="2321202e2f66696c6530202e2f6367726f75702e6e65742f73797a3100202e2f6367726f75702e6370752f2e797a3100204073797374656d5e20706f72743000202728407365637572697479232b5b207573657200205d206386ff0f0000000000006465765e63707573657473656c662547504c0a33e5d53c6170fc22cf15c1c61873b54884d55f9f74be9305d0097e7777a3757f89897750ed5ddb939da9cbdb487b0e710eeda73058c09ef1694239daa01f5f055c2e485b0942a32f5bff951d6c0a3b2126"], 0xc6)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80080, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009})
prctl$PR_SET_MM(0x23, 0xc12f356e2b198f51, &(0x7f0000ffb000/0x3000)=nil)
r6 = add_key$user(&(0x7f0000000240)='user\x00', 0x0, &(0x7f00000003c0)="f1d6275ef617a6431d89429288e0ac455d00867174541165cd16bb6d1e0c518e99686266942a368982062f14bf14b371f7c145615ce8b80270dfb3cfb2b3ba99b194f601cb40eb1d7d5a61c930794e97bbf467400a2607be65ddd8e7d0e6e8ad3dbe1a058f0bfa935f8e000cfc89ab0a680ce1995c79c96d75ffed5fa0c3ea145c05b486edff5720e527ffa7fb16edc136bc8f270eeed4ad3842ae9f912c747bdbd65923ce3ffd193d15d09649f199b4a3133e8b44b04c2f554be4fc296fca5132726b13685477328045", 0xca, 0xfffffffffffffffd)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000004c0)={r6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="088237799872f2")
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000700)=0x8001, 0xfffffffffffffc5e)
write$binfmt_script(r7, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e2f66696c6530202224200a8d78a8da80e9c697ea8c67c83c600062d5e6abf3bdfe67183c93d3ede4e0d97734630f72d2d31d7d567651ab67d8b87a2e891392eb399cc9dc6743e4dad0fe06c5d43893f0e060e53c0523ff7377f28931899667b3ad8d084938fe8f7ae823f5813b62ad73274d000b2a56f060ede63ffaba904cbcc8f373cec0f407597d5f808a1f6331a310d75063ea796579117be6cda8cc01e4936df71402ece51429d694a7"], 0xbe)
r8 = socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000200)=0xa7)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A')
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000540)={{0x10000b}, 'port0\x00', 0x41, 0x11020, 0x7f, 0x3, 0x7fff, 0x3, 0x6f25, 0x0, 0x2, 0x8001})
syz_open_dev$mouse(0x0, 0x81, 0x200)
r9 = dup2(0xffffffffffffffff, r4)
r10 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r10, 0x6)
r11 = socket$inet(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
write$cgroup_subtree(r9, &(0x7f00000008c0)=ANY=[], 0xffffffffffffffea)
syz_open_dev$evdev(&(0x7f0000000780)='/dev/input/event#\x00', 0x5, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)

[  618.587750][T15832] device nr0
 entered promiscuous mode
13:48:35 executing program 0:
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2)
r0 = syz_open_dev$swradio(0x0, 0x1, 0x2)
epoll_create1(0x80000)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff})
accept4$vsock_stream(r2, &(0x7f0000000740), 0x10, 0x800)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000002c0)={0x26, 0x0, 0x4, 0x20, {}, {0x3, 0xc, 0xd, 0x0, 0xffff, 0x3, "f2f2a35d"}, 0x0, 0x1, @fd=<r4=>r3, 0x4})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu//.z1\x8c', 0x1ff)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="2321202e2f66696c6530202e2f6367726f75702e6e65742f73797a3100202e2f6367726f75702e6370752f2e797a3100204073797374656d5e20706f72743000202728407365637572697479232b5b207573657200205d206386ff0f0000000000006465765e63707573657473656c662547504c0a33e5d53c6170fc22cf15c1c61873b54884d55f9f74be9305d0097e7777a3757f89897750ed5ddb939da9cbdb487b0e710eeda73058c09ef1694239daa01f5f055c2e485b0942a32f5bff951d6c0a3b2126"], 0xc6)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80080, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009})
prctl$PR_SET_MM(0x23, 0xc12f356e2b198f51, &(0x7f0000ffb000/0x3000)=nil)
r6 = add_key$user(&(0x7f0000000240)='user\x00', 0x0, &(0x7f00000003c0)="f1d6275ef617a6431d89429288e0ac455d00867174541165cd16bb6d1e0c518e99686266942a368982062f14bf14b371f7c145615ce8b80270dfb3cfb2b3ba99b194f601cb40eb1d7d5a61c930794e97bbf467400a2607be65ddd8e7d0e6e8ad3dbe1a058f0bfa935f8e000cfc89ab0a680ce1995c79c96d75ffed5fa0c3ea145c05b486edff5720e527ffa7fb16edc136bc8f270eeed4ad3842ae9f912c747bdbd65923ce3ffd193d15d09649f199b4a3133e8b44b04c2f554be4fc296fca5132726b13685477328045", 0xca, 0xfffffffffffffffd)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000004c0)={r6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="088237799872f2")
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000700)=0x8001, 0xfffffffffffffc5e)
write$binfmt_script(r7, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e2f66696c6530202224200a8d78a8da80e9c697ea8c67c83c600062d5e6abf3bdfe67183c93d3ede4e0d97734630f72d2d31d7d567651ab67d8b87a2e891392eb399cc9dc6743e4dad0fe06c5d43893f0e060e53c0523ff7377f28931899667b3ad8d084938fe8f7ae823f5813b62ad73274d000b2a56f060ede63ffaba904cbcc8f373cec0f407597d5f808a1f6331a310d75063ea796579117be6cda8cc01e4936df71402ece51429d694a7"], 0xbe)
r8 = socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000200)=0xa7)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A')
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000540)={{0x10000b}, 'port0\x00', 0x41, 0x11020, 0x7f, 0x3, 0x7fff, 0x3, 0x6f25, 0x0, 0x2, 0x8001})
syz_open_dev$mouse(0x0, 0x81, 0x200)
r9 = dup2(0xffffffffffffffff, r4)
r10 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r10, 0x6)
r11 = socket$inet(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
write$cgroup_subtree(r9, &(0x7f00000008c0)=ANY=[], 0xffffffffffffffea)
syz_open_dev$evdev(&(0x7f0000000780)='/dev/input/event#\x00', 0x5, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)

13:48:35 executing program 4:
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2)
r0 = syz_open_dev$swradio(0x0, 0x1, 0x2)
epoll_create1(0x80000)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff})
accept4$vsock_stream(r2, &(0x7f0000000740), 0x10, 0x800)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000002c0)={0x26, 0x0, 0x4, 0x20, {}, {0x3, 0xc, 0xd, 0x0, 0xffff, 0x3, "f2f2a35d"}, 0x0, 0x1, @fd=<r4=>r3, 0x4})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu//.z1\x8c', 0x1ff)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="2321202e2f66696c6530202e2f6367726f75702e6e65742f73797a3100202e2f6367726f75702e6370752f2e797a3100204073797374656d5e20706f72743000202728407365637572697479232b5b207573657200205d206386ff0f0000000000006465765e63707573657473656c662547504c0a33e5d53c6170fc22cf15c1c61873b54884d55f9f74be9305d0097e7777a3757f89897750ed5ddb939da9cbdb487b0e710eeda73058c09ef1694239daa01f5f055c2e485b0942a32f5bff951d6c0a3b2126"], 0xc6)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80080, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009})
prctl$PR_SET_MM(0x23, 0xc12f356e2b198f51, &(0x7f0000ffb000/0x3000)=nil)
r6 = add_key$user(&(0x7f0000000240)='user\x00', 0x0, &(0x7f00000003c0)="f1d6275ef617a6431d89429288e0ac455d00867174541165cd16bb6d1e0c518e99686266942a368982062f14bf14b371f7c145615ce8b80270dfb3cfb2b3ba99b194f601cb40eb1d7d5a61c930794e97bbf467400a2607be65ddd8e7d0e6e8ad3dbe1a058f0bfa935f8e000cfc89ab0a680ce1995c79c96d75ffed5fa0c3ea145c05b486edff5720e527ffa7fb16edc136bc8f270eeed4ad3842ae9f912c747bdbd65923ce3ffd193d15d09649f199b4a3133e8b44b04c2f554be4fc296fca5132726b13685477328045", 0xca, 0xfffffffffffffffd)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000004c0)={r6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="088237799872f2")
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000700)=0x8001, 0xfffffffffffffc5e)
write$binfmt_script(r7, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e2f66696c6530202224200a8d78a8da80e9c697ea8c67c83c600062d5e6abf3bdfe67183c93d3ede4e0d97734630f72d2d31d7d567651ab67d8b87a2e891392eb399cc9dc6743e4dad0fe06c5d43893f0e060e53c0523ff7377f28931899667b3ad8d084938fe8f7ae823f5813b62ad73274d000b2a56f060ede63ffaba904cbcc8f373cec0f407597d5f808a1f6331a310d75063ea796579117be6cda8cc01e4936df71402ece51429d694a7"], 0xbe)
r8 = socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000200)=0xa7)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A')
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000540)={{0x10000b}, 'port0\x00', 0x41, 0x11020, 0x7f, 0x3, 0x7fff, 0x3, 0x6f25, 0x0, 0x2, 0x8001})
syz_open_dev$mouse(0x0, 0x81, 0x200)
r9 = dup2(0xffffffffffffffff, r4)
r10 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r10, 0x6)
r11 = socket$inet(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
write$cgroup_subtree(r9, &(0x7f00000008c0)=ANY=[], 0xffffffffffffffea)
syz_open_dev$evdev(&(0x7f0000000780)='/dev/input/event#\x00', 0x5, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)

13:48:35 executing program 1:
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2)
r0 = syz_open_dev$swradio(0x0, 0x1, 0x2)
epoll_create1(0x80000)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff})
accept4$vsock_stream(r2, &(0x7f0000000740), 0x10, 0x800)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000002c0)={0x26, 0x0, 0x4, 0x20, {}, {0x3, 0xc, 0xd, 0x0, 0xffff, 0x3, "f2f2a35d"}, 0x0, 0x1, @fd=<r4=>r3, 0x4})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu//.z1\x8c', 0x1ff)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="2321202e2f66696c6530202e2f6367726f75702e6e65742f73797a3100202e2f6367726f75702e6370752f2e797a3100204073797374656d5e20706f72743000202728407365637572697479232b5b207573657200205d206386ff0f0000000000006465765e63707573657473656c662547504c0a33e5d53c6170fc22cf15c1c61873b54884d55f9f74be9305d0097e7777a3757f89897750ed5ddb939da9cbdb487b0e710eeda73058c09ef1694239daa01f5f055c2e485b0942a32f5bff951d6c0a3b2126"], 0xc6)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80080, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009})
prctl$PR_SET_MM(0x23, 0xc12f356e2b198f51, &(0x7f0000ffb000/0x3000)=nil)
r6 = add_key$user(&(0x7f0000000240)='user\x00', 0x0, &(0x7f00000003c0)="f1d6275ef617a6431d89429288e0ac455d00867174541165cd16bb6d1e0c518e99686266942a368982062f14bf14b371f7c145615ce8b80270dfb3cfb2b3ba99b194f601cb40eb1d7d5a61c930794e97bbf467400a2607be65ddd8e7d0e6e8ad3dbe1a058f0bfa935f8e000cfc89ab0a680ce1995c79c96d75ffed5fa0c3ea145c05b486edff5720e527ffa7fb16edc136bc8f270eeed4ad3842ae9f912c747bdbd65923ce3ffd193d15d09649f199b4a3133e8b44b04c2f554be4fc296fca5132726b13685477328045", 0xca, 0xfffffffffffffffd)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000004c0)={r6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="088237799872f2")
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000700)=0x8001, 0xfffffffffffffc5e)
write$binfmt_script(r7, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e2f66696c6530202224200a8d78a8da80e9c697ea8c67c83c600062d5e6abf3bdfe67183c93d3ede4e0d97734630f72d2d31d7d567651ab67d8b87a2e891392eb399cc9dc6743e4dad0fe06c5d43893f0e060e53c0523ff7377f28931899667b3ad8d084938fe8f7ae823f5813b62ad73274d000b2a56f060ede63ffaba904cbcc8f373cec0f407597d5f808a1f6331a310d75063ea796579117be6cda8cc01e4936df71402ece51429d694a7"], 0xbe)
r8 = socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000200)=0xa7)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A')
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000540)={{0x10000b}, 'port0\x00', 0x41, 0x11020, 0x7f, 0x3, 0x7fff, 0x3, 0x6f25, 0x0, 0x2, 0x8001})
syz_open_dev$mouse(0x0, 0x81, 0x200)
r9 = dup2(0xffffffffffffffff, r4)
r10 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r10, 0x6)
r11 = socket$inet(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
write$cgroup_subtree(r9, &(0x7f00000008c0)=ANY=[], 0xffffffffffffffea)
syz_open_dev$evdev(&(0x7f0000000780)='/dev/input/event#\x00', 0x5, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)

[  619.126872][T15843] device nr0
 entered promiscuous mode
13:48:36 executing program 2:
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2)
r0 = syz_open_dev$swradio(0x0, 0x1, 0x2)
epoll_create1(0x80000)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff})
accept4$vsock_stream(r2, &(0x7f0000000740), 0x10, 0x800)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000002c0)={0x26, 0x0, 0x4, 0x20, {}, {0x3, 0xc, 0xd, 0x0, 0xffff, 0x3, "f2f2a35d"}, 0x0, 0x1, @fd=<r4=>r3, 0x4})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu//.z1\x8c', 0x1ff)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="2321202e2f66696c6530202e2f6367726f75702e6e65742f73797a3100202e2f6367726f75702e6370752f2e797a3100204073797374656d5e20706f72743000202728407365637572697479232b5b207573657200205d206386ff0f0000000000006465765e63707573657473656c662547504c0a33e5d53c6170fc22cf15c1c61873b54884d55f9f74be9305d0097e7777a3757f89897750ed5ddb939da9cbdb487b0e710eeda73058c09ef1694239daa01f5f055c2e485b0942a32f5bff951d6c0a3b2126"], 0xc6)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80080, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009})
prctl$PR_SET_MM(0x23, 0xc12f356e2b198f51, &(0x7f0000ffb000/0x3000)=nil)
r6 = add_key$user(&(0x7f0000000240)='user\x00', 0x0, &(0x7f00000003c0)="f1d6275ef617a6431d89429288e0ac455d00867174541165cd16bb6d1e0c518e99686266942a368982062f14bf14b371f7c145615ce8b80270dfb3cfb2b3ba99b194f601cb40eb1d7d5a61c930794e97bbf467400a2607be65ddd8e7d0e6e8ad3dbe1a058f0bfa935f8e000cfc89ab0a680ce1995c79c96d75ffed5fa0c3ea145c05b486edff5720e527ffa7fb16edc136bc8f270eeed4ad3842ae9f912c747bdbd65923ce3ffd193d15d09649f199b4a3133e8b44b04c2f554be4fc296fca5132726b13685477328045", 0xca, 0xfffffffffffffffd)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000004c0)={r6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="088237799872f2")
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000700)=0x8001, 0xfffffffffffffc5e)
write$binfmt_script(r7, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e2f66696c6530202224200a8d78a8da80e9c697ea8c67c83c600062d5e6abf3bdfe67183c93d3ede4e0d97734630f72d2d31d7d567651ab67d8b87a2e891392eb399cc9dc6743e4dad0fe06c5d43893f0e060e53c0523ff7377f28931899667b3ad8d084938fe8f7ae823f5813b62ad73274d000b2a56f060ede63ffaba904cbcc8f373cec0f407597d5f808a1f6331a310d75063ea796579117be6cda8cc01e4936df71402ece51429d694a7"], 0xbe)
r8 = socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000200)=0xa7)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A')
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000540)={{0x10000b}, 'port0\x00', 0x41, 0x11020, 0x7f, 0x3, 0x7fff, 0x3, 0x6f25, 0x0, 0x2, 0x8001})
syz_open_dev$mouse(0x0, 0x81, 0x200)
r9 = dup2(0xffffffffffffffff, r4)
r10 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r10, 0x6)
r11 = socket$inet(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
write$cgroup_subtree(r9, &(0x7f00000008c0)=ANY=[], 0xffffffffffffffea)
syz_open_dev$evdev(&(0x7f0000000780)='/dev/input/event#\x00', 0x5, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)

[  619.180096][T15849] device nr0
 entered promiscuous mode
13:48:36 executing program 5:
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2)
r0 = syz_open_dev$swradio(0x0, 0x1, 0x2)
epoll_create1(0x80000)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff})
accept4$vsock_stream(r2, &(0x7f0000000740), 0x10, 0x800)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000002c0)={0x26, 0x0, 0x4, 0x20, {}, {0x3, 0xc, 0xd, 0x0, 0xffff, 0x3, "f2f2a35d"}, 0x0, 0x1, @fd=<r4=>r3, 0x4})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu//.z1\x8c', 0x1ff)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="2321202e2f66696c6530202e2f6367726f75702e6e65742f73797a3100202e2f6367726f75702e6370752f2e797a3100204073797374656d5e20706f72743000202728407365637572697479232b5b207573657200205d206386ff0f0000000000006465765e63707573657473656c662547504c0a33e5d53c6170fc22cf15c1c61873b54884d55f9f74be9305d0097e7777a3757f89897750ed5ddb939da9cbdb487b0e710eeda73058c09ef1694239daa01f5f055c2e485b0942a32f5bff951d6c0a3b2126"], 0xc6)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80080, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009})
prctl$PR_SET_MM(0x23, 0xc12f356e2b198f51, &(0x7f0000ffb000/0x3000)=nil)
r6 = add_key$user(&(0x7f0000000240)='user\x00', 0x0, &(0x7f00000003c0)="f1d6275ef617a6431d89429288e0ac455d00867174541165cd16bb6d1e0c518e99686266942a368982062f14bf14b371f7c145615ce8b80270dfb3cfb2b3ba99b194f601cb40eb1d7d5a61c930794e97bbf467400a2607be65ddd8e7d0e6e8ad3dbe1a058f0bfa935f8e000cfc89ab0a680ce1995c79c96d75ffed5fa0c3ea145c05b486edff5720e527ffa7fb16edc136bc8f270eeed4ad3842ae9f912c747bdbd65923ce3ffd193d15d09649f199b4a3133e8b44b04c2f554be4fc296fca5132726b13685477328045", 0xca, 0xfffffffffffffffd)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000004c0)={r6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="088237799872f2")
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000700)=0x8001, 0xfffffffffffffc5e)
write$binfmt_script(r7, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e2f66696c6530202224200a8d78a8da80e9c697ea8c67c83c600062d5e6abf3bdfe67183c93d3ede4e0d97734630f72d2d31d7d567651ab67d8b87a2e891392eb399cc9dc6743e4dad0fe06c5d43893f0e060e53c0523ff7377f28931899667b3ad8d084938fe8f7ae823f5813b62ad73274d000b2a56f060ede63ffaba904cbcc8f373cec0f407597d5f808a1f6331a310d75063ea796579117be6cda8cc01e4936df71402ece51429d694a7"], 0xbe)
r8 = socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000200)=0xa7)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A')
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000540)={{0x10000b}, 'port0\x00', 0x41, 0x11020, 0x7f, 0x3, 0x7fff, 0x3, 0x6f25, 0x0, 0x2, 0x8001})
syz_open_dev$mouse(0x0, 0x81, 0x200)
r9 = dup2(0xffffffffffffffff, r4)
r10 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r10, 0x6)
r11 = socket$inet(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
write$cgroup_subtree(r9, &(0x7f00000008c0)=ANY=[], 0xffffffffffffffea)
syz_open_dev$evdev(&(0x7f0000000780)='/dev/input/event#\x00', 0x5, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)

[  619.441094][T15847] device nr0
 entered promiscuous mode
[  619.517462][T15858] device nr0
 entered promiscuous mode
13:48:36 executing program 3:
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2)
r0 = syz_open_dev$swradio(0x0, 0x1, 0x2)
epoll_create1(0x80000)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff})
accept4$vsock_stream(r2, &(0x7f0000000740), 0x10, 0x800)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000002c0)={0x26, 0x0, 0x4, 0x20, {}, {0x3, 0xc, 0xd, 0x0, 0xffff, 0x3, "f2f2a35d"}, 0x0, 0x1, @fd=<r4=>r3, 0x4})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu//.z1\x8c', 0x1ff)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="2321202e2f66696c6530202e2f6367726f75702e6e65742f73797a3100202e2f6367726f75702e6370752f2e797a3100204073797374656d5e20706f72743000202728407365637572697479232b5b207573657200205d206386ff0f0000000000006465765e63707573657473656c662547504c0a33e5d53c6170fc22cf15c1c61873b54884d55f9f74be9305d0097e7777a3757f89897750ed5ddb939da9cbdb487b0e710eeda73058c09ef1694239daa01f5f055c2e485b0942a32f5bff951d6c0a3b2126"], 0xc6)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80080, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009})
prctl$PR_SET_MM(0x23, 0xc12f356e2b198f51, &(0x7f0000ffb000/0x3000)=nil)
r6 = add_key$user(&(0x7f0000000240)='user\x00', 0x0, &(0x7f00000003c0)="f1d6275ef617a6431d89429288e0ac455d00867174541165cd16bb6d1e0c518e99686266942a368982062f14bf14b371f7c145615ce8b80270dfb3cfb2b3ba99b194f601cb40eb1d7d5a61c930794e97bbf467400a2607be65ddd8e7d0e6e8ad3dbe1a058f0bfa935f8e000cfc89ab0a680ce1995c79c96d75ffed5fa0c3ea145c05b486edff5720e527ffa7fb16edc136bc8f270eeed4ad3842ae9f912c747bdbd65923ce3ffd193d15d09649f199b4a3133e8b44b04c2f554be4fc296fca5132726b13685477328045", 0xca, 0xfffffffffffffffd)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000004c0)={r6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="088237799872f2")
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000700)=0x8001, 0xfffffffffffffc5e)
write$binfmt_script(r7, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e2f66696c6530202224200a8d78a8da80e9c697ea8c67c83c600062d5e6abf3bdfe67183c93d3ede4e0d97734630f72d2d31d7d567651ab67d8b87a2e891392eb399cc9dc6743e4dad0fe06c5d43893f0e060e53c0523ff7377f28931899667b3ad8d084938fe8f7ae823f5813b62ad73274d000b2a56f060ede63ffaba904cbcc8f373cec0f407597d5f808a1f6331a310d75063ea796579117be6cda8cc01e4936df71402ece51429d694a7"], 0xbe)
r8 = socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000200)=0xa7)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A')
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000540)={{0x10000b}, 'port0\x00', 0x41, 0x11020, 0x7f, 0x3, 0x7fff, 0x3, 0x6f25, 0x0, 0x2, 0x8001})
syz_open_dev$mouse(0x0, 0x81, 0x200)
r9 = dup2(0xffffffffffffffff, r4)
r10 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r10, 0x6)
r11 = socket$inet(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
write$cgroup_subtree(r9, &(0x7f00000008c0)=ANY=[], 0xffffffffffffffea)
syz_open_dev$evdev(&(0x7f0000000780)='/dev/input/event#\x00', 0x5, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)

[  619.798107][T15867] device nr0
 entered promiscuous mode
[  619.807223][T15870] device nr0
 entered promiscuous mode
13:48:36 executing program 0:
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2)
r0 = syz_open_dev$swradio(0x0, 0x1, 0x2)
epoll_create1(0x80000)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff})
accept4$vsock_stream(r2, &(0x7f0000000740), 0x10, 0x800)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000002c0)={0x26, 0x0, 0x4, 0x20, {}, {0x3, 0xc, 0xd, 0x0, 0xffff, 0x3, "f2f2a35d"}, 0x0, 0x1, @fd=<r4=>r3, 0x4})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu//.z1\x8c', 0x1ff)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="2321202e2f66696c6530202e2f6367726f75702e6e65742f73797a3100202e2f6367726f75702e6370752f2e797a3100204073797374656d5e20706f72743000202728407365637572697479232b5b207573657200205d206386ff0f0000000000006465765e63707573657473656c662547504c0a33e5d53c6170fc22cf15c1c61873b54884d55f9f74be9305d0097e7777a3757f89897750ed5ddb939da9cbdb487b0e710eeda73058c09ef1694239daa01f5f055c2e485b0942a32f5bff951d6c0a3b2126"], 0xc6)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80080, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009})
prctl$PR_SET_MM(0x23, 0xc12f356e2b198f51, &(0x7f0000ffb000/0x3000)=nil)
r6 = add_key$user(&(0x7f0000000240)='user\x00', 0x0, &(0x7f00000003c0)="f1d6275ef617a6431d89429288e0ac455d00867174541165cd16bb6d1e0c518e99686266942a368982062f14bf14b371f7c145615ce8b80270dfb3cfb2b3ba99b194f601cb40eb1d7d5a61c930794e97bbf467400a2607be65ddd8e7d0e6e8ad3dbe1a058f0bfa935f8e000cfc89ab0a680ce1995c79c96d75ffed5fa0c3ea145c05b486edff5720e527ffa7fb16edc136bc8f270eeed4ad3842ae9f912c747bdbd65923ce3ffd193d15d09649f199b4a3133e8b44b04c2f554be4fc296fca5132726b13685477328045", 0xca, 0xfffffffffffffffd)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000004c0)={r6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="088237799872f2")
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000700)=0x8001, 0xfffffffffffffc5e)
write$binfmt_script(r7, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e2f66696c6530202224200a8d78a8da80e9c697ea8c67c83c600062d5e6abf3bdfe67183c93d3ede4e0d97734630f72d2d31d7d567651ab67d8b87a2e891392eb399cc9dc6743e4dad0fe06c5d43893f0e060e53c0523ff7377f28931899667b3ad8d084938fe8f7ae823f5813b62ad73274d000b2a56f060ede63ffaba904cbcc8f373cec0f407597d5f808a1f6331a310d75063ea796579117be6cda8cc01e4936df71402ece51429d694a7"], 0xbe)
r8 = socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000200)=0xa7)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A')
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000540)={{0x10000b}, 'port0\x00', 0x41, 0x11020, 0x7f, 0x3, 0x7fff, 0x3, 0x6f25, 0x0, 0x2, 0x8001})
syz_open_dev$mouse(0x0, 0x81, 0x200)
r9 = dup2(0xffffffffffffffff, r4)
r10 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r10, 0x6)
r11 = socket$inet(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
write$cgroup_subtree(r9, &(0x7f00000008c0)=ANY=[], 0xffffffffffffffea)
syz_open_dev$evdev(&(0x7f0000000780)='/dev/input/event#\x00', 0x5, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)

13:48:37 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004cc0)=@newlink={0x28, 0x11, 0xe3b, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x0)

13:48:37 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000fed000/0x1000)=nil, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)

[  620.203384][T15881] device nr0
 entered promiscuous mode
13:48:37 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c91300", 0x1e}], 0x1}, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)='$\x00\x00\x00X', 0x5)
sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

[  620.401592][T15892] device nr0
 entered promiscuous mode
13:48:37 executing program 2:
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2)
r0 = syz_open_dev$swradio(0x0, 0x1, 0x2)
epoll_create1(0x80000)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff})
accept4$vsock_stream(r2, &(0x7f0000000740), 0x10, 0x800)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000002c0)={0x26, 0x0, 0x4, 0x20, {}, {0x3, 0xc, 0xd, 0x0, 0xffff, 0x3, "f2f2a35d"}, 0x0, 0x1, @fd=<r4=>r3, 0x4})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu//.z1\x8c', 0x1ff)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="2321202e2f66696c6530202e2f6367726f75702e6e65742f73797a3100202e2f6367726f75702e6370752f2e797a3100204073797374656d5e20706f72743000202728407365637572697479232b5b207573657200205d206386ff0f0000000000006465765e63707573657473656c662547504c0a33e5d53c6170fc22cf15c1c61873b54884d55f9f74be9305d0097e7777a3757f89897750ed5ddb939da9cbdb487b0e710eeda73058c09ef1694239daa01f5f055c2e485b0942a32f5bff951d6c0a3b2126"], 0xc6)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80080, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009})
prctl$PR_SET_MM(0x23, 0xc12f356e2b198f51, &(0x7f0000ffb000/0x3000)=nil)
r6 = add_key$user(&(0x7f0000000240)='user\x00', 0x0, &(0x7f00000003c0)="f1d6275ef617a6431d89429288e0ac455d00867174541165cd16bb6d1e0c518e99686266942a368982062f14bf14b371f7c145615ce8b80270dfb3cfb2b3ba99b194f601cb40eb1d7d5a61c930794e97bbf467400a2607be65ddd8e7d0e6e8ad3dbe1a058f0bfa935f8e000cfc89ab0a680ce1995c79c96d75ffed5fa0c3ea145c05b486edff5720e527ffa7fb16edc136bc8f270eeed4ad3842ae9f912c747bdbd65923ce3ffd193d15d09649f199b4a3133e8b44b04c2f554be4fc296fca5132726b13685477328045", 0xca, 0xfffffffffffffffd)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000004c0)={r6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="088237799872f2")
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000700)=0x8001, 0xfffffffffffffc5e)
write$binfmt_script(r7, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e2f66696c6530202224200a8d78a8da80e9c697ea8c67c83c600062d5e6abf3bdfe67183c93d3ede4e0d97734630f72d2d31d7d567651ab67d8b87a2e891392eb399cc9dc6743e4dad0fe06c5d43893f0e060e53c0523ff7377f28931899667b3ad8d084938fe8f7ae823f5813b62ad73274d000b2a56f060ede63ffaba904cbcc8f373cec0f407597d5f808a1f6331a310d75063ea796579117be6cda8cc01e4936df71402ece51429d694a7"], 0xbe)
r8 = socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000200)=0xa7)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A')
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000540)={{0x10000b}, 'port0\x00', 0x41, 0x11020, 0x7f, 0x3, 0x7fff, 0x3, 0x6f25, 0x0, 0x2, 0x8001})
syz_open_dev$mouse(0x0, 0x81, 0x200)
r9 = dup2(0xffffffffffffffff, r4)
r10 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r10, 0x6)
r11 = socket$inet(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
write$cgroup_subtree(r9, &(0x7f00000008c0)=ANY=[], 0xffffffffffffffea)
syz_open_dev$evdev(&(0x7f0000000780)='/dev/input/event#\x00', 0x5, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)

13:48:37 executing program 5:
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2)
r0 = syz_open_dev$swradio(0x0, 0x1, 0x2)
epoll_create1(0x80000)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff})
accept4$vsock_stream(r2, &(0x7f0000000740), 0x10, 0x800)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000002c0)={0x26, 0x0, 0x4, 0x20, {}, {0x3, 0xc, 0xd, 0x0, 0xffff, 0x3, "f2f2a35d"}, 0x0, 0x1, @fd=<r4=>r3, 0x4})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu//.z1\x8c', 0x1ff)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="2321202e2f66696c6530202e2f6367726f75702e6e65742f73797a3100202e2f6367726f75702e6370752f2e797a3100204073797374656d5e20706f72743000202728407365637572697479232b5b207573657200205d206386ff0f0000000000006465765e63707573657473656c662547504c0a33e5d53c6170fc22cf15c1c61873b54884d55f9f74be9305d0097e7777a3757f89897750ed5ddb939da9cbdb487b0e710eeda73058c09ef1694239daa01f5f055c2e485b0942a32f5bff951d6c0a3b2126"], 0xc6)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80080, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009})
prctl$PR_SET_MM(0x23, 0xc12f356e2b198f51, &(0x7f0000ffb000/0x3000)=nil)
r6 = add_key$user(&(0x7f0000000240)='user\x00', 0x0, &(0x7f00000003c0)="f1d6275ef617a6431d89429288e0ac455d00867174541165cd16bb6d1e0c518e99686266942a368982062f14bf14b371f7c145615ce8b80270dfb3cfb2b3ba99b194f601cb40eb1d7d5a61c930794e97bbf467400a2607be65ddd8e7d0e6e8ad3dbe1a058f0bfa935f8e000cfc89ab0a680ce1995c79c96d75ffed5fa0c3ea145c05b486edff5720e527ffa7fb16edc136bc8f270eeed4ad3842ae9f912c747bdbd65923ce3ffd193d15d09649f199b4a3133e8b44b04c2f554be4fc296fca5132726b13685477328045", 0xca, 0xfffffffffffffffd)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000004c0)={r6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="088237799872f2")
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000700)=0x8001, 0xfffffffffffffc5e)
write$binfmt_script(r7, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e2f66696c6530202224200a8d78a8da80e9c697ea8c67c83c600062d5e6abf3bdfe67183c93d3ede4e0d97734630f72d2d31d7d567651ab67d8b87a2e891392eb399cc9dc6743e4dad0fe06c5d43893f0e060e53c0523ff7377f28931899667b3ad8d084938fe8f7ae823f5813b62ad73274d000b2a56f060ede63ffaba904cbcc8f373cec0f407597d5f808a1f6331a310d75063ea796579117be6cda8cc01e4936df71402ece51429d694a7"], 0xbe)
r8 = socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000200)=0xa7)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A')
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000540)={{0x10000b}, 'port0\x00', 0x41, 0x11020, 0x7f, 0x3, 0x7fff, 0x3, 0x6f25, 0x0, 0x2, 0x8001})
syz_open_dev$mouse(0x0, 0x81, 0x200)
r9 = dup2(0xffffffffffffffff, r4)
r10 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r10, 0x6)
r11 = socket$inet(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
write$cgroup_subtree(r9, &(0x7f00000008c0)=ANY=[], 0xffffffffffffffea)
syz_open_dev$evdev(&(0x7f0000000780)='/dev/input/event#\x00', 0x5, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)

[  620.600143][T15905] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  620.785088][T15908] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
13:48:37 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), {0xffffff7f, 0xc0, 0x59555956}})

[  620.851746][T15914] device nr0
 entered promiscuous mode
[  620.913873][T15910] device nr0
 entered promiscuous mode
13:48:38 executing program 3:
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000040)={0x0, 0x989680}, 0x0)

13:48:38 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000fed000/0x1000)=nil, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)

13:48:38 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), {0xffffff7f, 0xc0, 0x59555956}})

13:48:38 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000fed000/0x1000)=nil, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)

13:48:38 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), {0xffffff7f, 0xc0, 0x59555956}})

13:48:38 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), {0xffffff7f, 0xc0, 0x59555956}})

13:48:39 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000fed000/0x1000)=nil, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)

13:48:39 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000fed000/0x1000)=nil, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)

13:48:39 executing program 3:
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000040)={0x0, 0x989680}, 0x0)

13:48:39 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000fed000/0x1000)=nil, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)

13:48:39 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000100)="1f00000001090104fd4354c007f37fff020501000800020004000200ffdf00", 0x1f)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000000000, 0x0)

13:48:39 executing program 3:
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000040)={0x0, 0x989680}, 0x0)

13:48:39 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000fed000/0x1000)=nil, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)

[  623.118171][T15993] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'.
13:48:40 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000fed000/0x1000)=nil, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)

13:48:40 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000fed000/0x1000)=nil, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)

[  623.168387][T15993] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
13:48:40 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=<r3=>0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x12}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
sendto$packet(r4, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})

13:48:40 executing program 3:
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000040)={0x0, 0x989680}, 0x0)

13:48:40 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000fed000/0x1000)=nil, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)

13:48:41 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000fed000/0x1000)=nil, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)

13:48:41 executing program 3:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYPTR, @ANYBLOB="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"], 0x1001)
dup3(r1, r0, 0x0)
finit_module(r1, 0x0, 0x0)

13:48:41 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000fed000/0x1000)=nil, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)

13:48:41 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000fed000/0x1000)=nil, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)

[  624.664298][   T26] audit: type=1804 audit(1573220921.739:203): pid=16050 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir420019173/syzkaller.o5UXzl/138/bus" dev="sda1" ino=16961 res=1
[  624.736197][   T26] audit: type=1804 audit(1573220921.789:204): pid=16050 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir420019173/syzkaller.o5UXzl/138/bus" dev="sda1" ino=16961 res=1
13:48:42 executing program 3:
sendmmsg(0xffffffffffffffff, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x408}}], 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xaaaaaaaaaaaab8c, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x8001, 0x0)

13:48:42 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r3 = dup2(r2, r1)
getsockname$llc(r3, 0x0, &(0x7f0000000140))

13:48:42 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=<r3=>0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x12}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
sendto$packet(r4, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})

13:48:42 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=<r3=>0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x12}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
sendto$packet(r4, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})

13:48:42 executing program 1:
syz_open_dev$evdev(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sysinfo(&(0x7f0000000040)=""/22)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001ac0)="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", 0x7be}, {&(0x7f0000000100)="21ae4989bda14eebbd", 0x9}, {&(0x7f0000000300)}, {&(0x7f00000003c0)="ddcf96d929e7604d72fa7adada25441feb331fe015cf7a280d331b38f742a486f7be9764b294968f0f112b2c55fc8848b4fdbc233b787bd98a54637bde3a2fbcc5a4029db3887784f7ccd8814d036202c4e2099d4188f262264af5b8cb75f7d995c19a82c58ea973878f036589172aa21d3944f53035b7b6fc0859", 0x7b}], 0x4}, 0x0)
r0 = socket$inet(0x10, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x14\xea:\x01\x00\x00\x01', @ifru_flags=0xc})
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(r1)

[  625.835424][T16086] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  625.845375][T16086] EXT4-fs (loop3): bad geometry: first data block 0 is beyond end of filesystem (0)
13:48:43 executing program 3:
sendmmsg(0xffffffffffffffff, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x408}}], 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xaaaaaaaaaaaab8c, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x8001, 0x0)

13:48:43 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
ioprio_set$uid(0x3, r1, 0x0)

13:48:43 executing program 4:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
write$P9_RWALK(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r1], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r3, 0x0)

13:48:43 executing program 1:
syz_open_dev$evdev(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sysinfo(&(0x7f0000000040)=""/22)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001ac0)="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", 0x7be}, {&(0x7f0000000100)="21ae4989bda14eebbd", 0x9}, {&(0x7f0000000300)}, {&(0x7f00000003c0)="ddcf96d929e7604d72fa7adada25441feb331fe015cf7a280d331b38f742a486f7be9764b294968f0f112b2c55fc8848b4fdbc233b787bd98a54637bde3a2fbcc5a4029db3887784f7ccd8814d036202c4e2099d4188f262264af5b8cb75f7d995c19a82c58ea973878f036589172aa21d3944f53035b7b6fc0859", 0x7b}], 0x4}, 0x0)
r0 = socket$inet(0x10, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x14\xea:\x01\x00\x00\x01', @ifru_flags=0xc})
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(r1)

13:48:43 executing program 5:
mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mount(0x0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x22000a0, &(0x7f0000000500)={[{@mode={'mode', 0x3d, 0x8cffffff}}]})

[  626.525116][T16108] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  626.573200][T16108] EXT4-fs (loop3): bad geometry: first data block 0 is beyond end of filesystem (0)
[  626.601392][   T26] audit: type=1804 audit(1573220923.679:205): pid=16113 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir318842142/syzkaller.nRSraq/139/bus" dev="sda1" ino=16555 res=1
[  626.730960][   T26] audit: type=1804 audit(1573220923.699:206): pid=16113 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir318842142/syzkaller.nRSraq/139/bus" dev="sda1" ino=16555 res=1
13:48:43 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=<r3=>0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x12}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
sendto$packet(r4, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})

13:48:44 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=<r3=>0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x12}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
sendto$packet(r4, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})

[  626.894972][   T26] audit: type=1804 audit(1573220923.769:207): pid=16113 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir318842142/syzkaller.nRSraq/139/bus" dev="sda1" ino=16555 res=1
13:48:44 executing program 3:
sendmmsg(0xffffffffffffffff, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x408}}], 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xaaaaaaaaaaaab8c, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x8001, 0x0)

13:48:44 executing program 4:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
write$P9_RWALK(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r1], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r3, 0x0)

[  627.087459][   T26] audit: type=1804 audit(1573220923.779:208): pid=16116 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir318842142/syzkaller.nRSraq/139/bus" dev="sda1" ino=16555 res=1
13:48:44 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000040), 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x110000104e20, @empty}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
shutdown(r0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0xc0, 0x0, 0x0, 0x0, 0xffffffe5}}], 0x400000000000440, 0x2, 0x0)

13:48:44 executing program 1:
syz_open_dev$evdev(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sysinfo(&(0x7f0000000040)=""/22)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001ac0)="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", 0x7be}, {&(0x7f0000000100)="21ae4989bda14eebbd", 0x9}, {&(0x7f0000000300)}, {&(0x7f00000003c0)="ddcf96d929e7604d72fa7adada25441feb331fe015cf7a280d331b38f742a486f7be9764b294968f0f112b2c55fc8848b4fdbc233b787bd98a54637bde3a2fbcc5a4029db3887784f7ccd8814d036202c4e2099d4188f262264af5b8cb75f7d995c19a82c58ea973878f036589172aa21d3944f53035b7b6fc0859", 0x7b}], 0x4}, 0x0)
r0 = socket$inet(0x10, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x14\xea:\x01\x00\x00\x01', @ifru_flags=0xc})
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(r1)

[  627.269832][   T26] audit: type=1800 audit(1573220923.829:209): pid=16116 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16555 res=0
[  627.331355][T16136] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
13:48:44 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=<r3=>0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x12}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
sendto$packet(r4, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})

[  627.392032][   T26] audit: type=1804 audit(1573220924.279:210): pid=16134 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir318842142/syzkaller.nRSraq/140/bus" dev="sda1" ino=16866 res=1
[  627.459870][T16136] EXT4-fs (loop3): bad geometry: first data block 0 is beyond end of filesystem (0)
13:48:44 executing program 4:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
write$P9_RWALK(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r1], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r3, 0x0)

[  627.584212][   T26] audit: type=1804 audit(1573220924.289:211): pid=16134 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir318842142/syzkaller.nRSraq/140/bus" dev="sda1" ino=16866 res=1
13:48:44 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000040), 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x110000104e20, @empty}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
shutdown(r0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0xc0, 0x0, 0x0, 0x0, 0xffffffe5}}], 0x400000000000440, 0x2, 0x0)

[  627.912493][   T26] audit: type=1804 audit(1573220924.989:212): pid=16158 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir318842142/syzkaller.nRSraq/141/bus" dev="sda1" ino=16833 res=1
13:48:45 executing program 3:
sendmmsg(0xffffffffffffffff, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="a8000000000000000000000000000000552cac235d8858c9b708ad9643c738d845a5fa85ced2a340ac176ffbac05e6222cbc8929131d136728d4d0acff19bd737b737560067fef1f1e8d2069c7ffa1563bed4bdee4344b15a0d7f1c44ec31224aa6baf56bb184de6d2f32b46c89765f7eb62e08698b0c4554267855d36657087dc2c47d7f869887aa39050aac67a99cbfe392501d99b904af4d8e3065c6c11c9e900000000000000080100000000000000000000000000000ff3aef0a9b8a6efc313d34304c7f14bcb22c30d39bf615b56bb9c16794e0041a7973d349e9dd85ff19d93226694acb41136451c5ba34cbdd2c2d272d559c8119e0a5d5d30e04aa89d276d91698c1b6b83578f080c4e30cd7e1053f7fd6b68db9df6b05220d8571de00be77aced8f86178af2632f8f23af15c5e2d67f9085d4e4d5a92024cae0f2f73f47bf4a728398102933f683c476cb40063fbe6b4375b4d0de06910cf916b5b79bad8926043aa8a61461b4a4d5013bfdf0f7168899b6ab1ca1c4b2f6253361c51f6efffaec7d1fba2bbe2b41e1f3ca3e5b73b0760ac2e364d8baa2ece7cb1646dcd7155fb0ab3d76f00000000000000000100000000000000000000000000006dd232c0bd6c3bcdf97e9fb4aec7ab7df8cd16ab2527fe5495bc997969f034db0422c21378d693ad1da2e4efd1b89336b2d2382c1e101cd601b7b8167ceb1f036c5c4abc81f89af03390fe26c9ea1f31f1e060fda4a98b61faae360cd7a711cddf0993a6de6054f38aa9f0fd5a2c300ac9c00c3e51f98ad955d8b2357373df08bbc60131a15aea538e52b8b58a043f0895b09d02af680849dd5f96c29f4ae5e36703aed6c6a0e3ae831f69112864b10eb711bd5e9757a8c69607549f5fac1cb773c76eaad96b8997181fffcc62a28a10c246b53125d95cfe0e5efa5bcdb81ece786bdd313d4f0b0e8c0000000010000010010000000000000000000000000000a1848b5a91bec30a552eaab313b6350ed0a817f4166961a6f300b0561c28eed80b530ec025c4674b14be96dfd854af5ce97c40bc1a1acfdfd97711084bf9ba7d0050373e6e4cab696b84926fd7d411c8af5b10afe4be14828eb508e6daab295091c30f262c7e181fd8ddcd219b9907ec68bd5fa4fe752857a3c9d4da19c8f401351bf00a04f8f13e01c46e3e675de59e42971dfcbc6c5eea85a9252516694dee741cbdc663ac80c7280f9c76c591e7aa4d9076db46ebb12d22a275ec7451dfa345b037a5808ad2edc65b6260d8ea147c7862904165df4c01d75b43e96bbaa99c35cab6fe11275d1aaffd1c120ff4c46098ced8f2b68734ddcf000000000000004800000000000000000000000000000010acd3c343d9ceb1f930765c5d1dbad5684e6c9c4af50064caf5eee01a7f7eb1d31371104ce0b8705e0a2a02420e6fec9600000000000000434b13f044cfb2dc6df9de840653e447e5a7251b7250f0627c91e6686176fbf886989715180b1d4bcd53a62ee54709f74d91a4314d48a34725ba0c4f87950219b696a9a7f4e16001f724191293e3ff4945b2cf1ae0f409aea88cc0dd3fa08db805df34e0e56c31ca2e3cafc60b59373aac5730f583fb4f58870fb217401068a3ec6b8e2fa2ecae0b1d861842e750260a63beeaa4dcb0db4531f19a7725d0746df66c121fab3a33ac4e587cecfabdb849c7fada2a40585726aace71af66c89c9a564e30e7055fde9d62397f1e93fe62a15dccb0514939ae"], 0x408}}], 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xaaaaaaaaaaaab8c, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x8001, 0x0)

13:48:45 executing program 4:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
write$P9_RWALK(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r1], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r3, 0x0)

13:48:45 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=<r3=>0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x12}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
sendto$packet(r4, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})

13:48:45 executing program 1:
syz_open_dev$evdev(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sysinfo(&(0x7f0000000040)=""/22)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001ac0)="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", 0x7be}, {&(0x7f0000000100)="21ae4989bda14eebbd", 0x9}, {&(0x7f0000000300)}, {&(0x7f00000003c0)="ddcf96d929e7604d72fa7adada25441feb331fe015cf7a280d331b38f742a486f7be9764b294968f0f112b2c55fc8848b4fdbc233b787bd98a54637bde3a2fbcc5a4029db3887784f7ccd8814d036202c4e2099d4188f262264af5b8cb75f7d995c19a82c58ea973878f036589172aa21d3944f53035b7b6fc0859", 0x7b}], 0x4}, 0x0)
r0 = socket$inet(0x10, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x14\xea:\x01\x00\x00\x01', @ifru_flags=0xc})
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(r1)

13:48:45 executing program 2:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x24, &(0x7f0000caaffb), &(0x7f0000000000)=0xc)

13:48:45 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000040), 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x110000104e20, @empty}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
shutdown(r0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0xc0, 0x0, 0x0, 0x0, 0xffffffe5}}], 0x400000000000440, 0x2, 0x0)

[  628.445320][T16169] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  628.516518][T16169] EXT4-fs (loop3): bad geometry: first data block 0 is beyond end of filesystem (0)
13:48:45 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x4000000020000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
socket$inet6(0x10, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x2600000000000000}}], 0x4000000000000d0, 0x0)

13:48:45 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$sock(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000400)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0)

13:48:45 executing program 4:
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x200, 0x5, 0x1}, 0x3c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)

13:48:45 executing program 3:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x16, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00')
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a0, 0x0)

13:48:46 executing program 0:
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000100))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f0000000000))
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x11f)
recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x8000, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))

13:48:46 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x30, 0x16, [{0x2c, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x0, @link_local}}]}]}, @IFLA_GROUP={0x8}]}, 0x58}}, 0x0)

13:48:46 executing program 4:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xca00, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(r1, &(0x7f0000000600)="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", 0x200)
sendfile(r1, r2, 0x0, 0x7fffffa7)

13:48:46 executing program 3:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x16, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00')
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a0, 0x0)

13:48:46 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000040), 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x110000104e20, @empty}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
shutdown(r0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0xc0, 0x0, 0x0, 0x0, 0xffffffe5}}], 0x400000000000440, 0x2, 0x0)

[  629.188365][T16210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  629.299075][T16218] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
13:48:46 executing program 0:
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000100))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f0000000000))
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="6f68fde88b508405c8647cfc00b3dd647f450000000000000000fb0003000000000000008171101000720155fd36f6b8209bbe0b00001600380001000900ff030100029ebd6ce1afd40e4ec6ed2fcf490794000000094baa1014256024ffff0000a1e1dc3aa003463851928c68c9ffe59594233c796be7a99e4c75ecb2d3b988779663c376cc5b11e040bc1d3c7be8f0409ec41eb943e04091fd0e9a487fc9adfd9e084a2af2233696c438b5274060565dda7d2d8024641c833b124eb3bfb2a5b1f860fef815b832d825a1ace52611911588f65c74d56a26cddbc71dc8d81b66b0c14fab03c2e738438e0c1c34106c079f1aef08ad1172d888f58fee369c3bc8286b5ee24b9a85b70e0627047cc36e4163de1cd626b86b232cf97411fe8772"], 0x11f)
recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x8000, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))

13:48:46 executing program 1:
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000100))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f0000000000))
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x11f)
recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x8000, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))

13:48:46 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x4000000020000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
socket$inet6(0x10, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x2600000000000000}}], 0x4000000000000d0, 0x0)

13:48:46 executing program 3:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x16, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00')
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a0, 0x0)

[  629.854504][T16238] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
13:48:47 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x4000000020000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
socket$inet6(0x10, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x2600000000000000}}], 0x4000000000000d0, 0x0)

[  630.093962][   T26] kauditd_printk_skb: 6 callbacks suppressed
[  630.093983][   T26] audit: type=1804 audit(1573220927.169:219): pid=16245 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir318842142/syzkaller.nRSraq/144/file0/file0" dev="sda1" ino=16833 res=1
13:48:47 executing program 3:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x16, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00')
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a0, 0x0)

13:48:47 executing program 4:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xca00, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(r1, &(0x7f0000000600)="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", 0x200)
sendfile(r1, r2, 0x0, 0x7fffffa7)

[  630.382976][   T26] audit: type=1804 audit(1573220927.169:220): pid=16220 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir318842142/syzkaller.nRSraq/144/file0/file0" dev="sda1" ino=16833 res=1
13:48:47 executing program 0:
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000100))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f0000000000))
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x11f)
recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x8000, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))

13:48:47 executing program 1:
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000100))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f0000000000))
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="6f68fde88b508405c8647cfc00b3dd647f450000000000000000fb0003000000000000008171101000720155fd36f6b8209bbe0b00001600380001000900ff030100029ebd6ce1afd40e4ec6ed2fcf490794000000094baa1014256024ffff0000a1e1dc3aa003463851928c68c9ffe59594233c796be7a99e4c75ecb2d3b988779663c376cc5b11e040bc1d3c7be8f0409ec41eb943e04091fd0e9a487fc9adfd9e084a2af2233696c438b5274060565dda7d2d8024641c833b124eb3bfb2a5b1f860fef815b832d825a1ace52611911588f65c74d56a26cddbc71dc8d81b66b0c14fab03c2e738438e0c1c34106c079f1aef08ad1172d888f58fee369c3bc8286b5ee24b9a85b70e0627047cc36e4163de1cd626b86b232cf97411fe8772"], 0x11f)
recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x8000, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))

[  630.819007][   T26] audit: type=1800 audit(1573220927.889:221): pid=16261 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16530 res=0
13:48:48 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x4000000020000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
socket$inet6(0x10, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x2600000000000000}}], 0x4000000000000d0, 0x0)

[  630.943551][   T26] audit: type=1804 audit(1573220927.969:222): pid=16263 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir318842142/syzkaller.nRSraq/145/file0/file0" dev="sda1" ino=16530 res=1
13:48:48 executing program 3:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xca00, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(r1, &(0x7f0000000600)="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", 0x200)
sendfile(r1, r2, 0x0, 0x7fffffa7)

[  631.107041][   T26] audit: type=1800 audit(1573220927.969:223): pid=16263 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16530 res=0
13:48:48 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x4000000020000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
socket$inet6(0x10, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x2600000000000000}}], 0x4000000000000d0, 0x0)

13:48:48 executing program 4:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xca00, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(r1, &(0x7f0000000600)="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", 0x200)
sendfile(r1, r2, 0x0, 0x7fffffa7)

13:48:48 executing program 0:
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000100))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f0000000000))
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x11f)
recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x8000, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))

13:48:48 executing program 1:
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000100))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f0000000000))
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x11f)
recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x8000, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))

[  631.332001][   T26] audit: type=1800 audit(1573220928.409:224): pid=16274 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="loop3" ino=53 res=0
13:48:48 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x4000000020000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
socket$inet6(0x10, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x2600000000000000}}], 0x4000000000000d0, 0x0)

[  631.453518][   T26] audit: type=1804 audit(1573220928.529:225): pid=16274 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir420019173/syzkaller.o5UXzl/147/file0/file0" dev="loop3" ino=53 res=1
[  631.694150][   T26] audit: type=1800 audit(1573220928.529:226): pid=16274 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="loop3" ino=53 res=0
[  631.929342][   T26] audit: type=1800 audit(1573220928.849:227): pid=16293 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16591 res=0
[  631.967614][T16274] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[  632.035472][T16274] FAT-fs (loop3): Filesystem has been set read-only
[  632.171611][   T26] audit: type=1804 audit(1573220929.079:228): pid=16289 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir318842142/syzkaller.nRSraq/146/file0/file0" dev="sda1" ino=16591 res=1
[  632.172823][T16274] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 17)
13:48:49 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x4000000020000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
socket$inet6(0x10, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x2600000000000000}}], 0x4000000000000d0, 0x0)

13:48:49 executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/17, 0x300000, 0x1000}, 0x18)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4)
r1 = socket$inet6(0xa, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x1, r2}, 0x10)

13:48:49 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="00080a80000000000300000008000100753332005800020014000500000000000000000000000000000000004000060084941ce8b13c0001000000000000000020898dde66057433b6ef3a41d22be225e0001b00000000000000000000000000000000000000000084e1a912c5998bcbf050000000000000000000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f5532e73f0e1d2c450a7decbf3431a69f9b2ecb3291bed174245a962fe0484676958265e2988326a89db3139d91fe4aee6ae7e745abdfc21a9f61f2035979c1e3e9fea5b3958bc14fce6e66a36d1ab3194534ba4e973684b27793bff837d3"], 0x84}}, 0x0)

13:48:49 executing program 3:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xca00, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(r1, &(0x7f0000000600)="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", 0x200)
sendfile(r1, r2, 0x0, 0x7fffffa7)

13:48:49 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000180)='memory.swap.max\x00', 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)={'Kyz1'}, 0x1)

13:48:49 executing program 4:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xca00, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200)
sendfile(r1, r2, 0x0, 0x7fffffa7)

13:48:49 executing program 0:
openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0)
socket$inet6(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc)
ioprio_get$uid(0x3, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xfffffffffffffffd}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8)

[  632.791720][T16309] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'.
13:48:49 executing program 5:
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
open(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000006080), 0x3ea818461ad51e9, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socket$inet6(0xa, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r5 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000040)=0x10000000006)
r6 = perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r6, r5, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000de3e000000000000000000000000000100000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000000500000000000000000076657468305f746f5f7465616d000000644cbfb861048ff1680000000000000064756d0004300000000000000000000073797a6b616c6c8279a7e00000000000ffffffffffff000000000000ffffffffffff00000000000000007000000070000000a000000072656469726563740000000000000000000000000000000000000000000000000800000000000000ffffffff000000000b00000000000000000073797a6b616c6c65723100000000000067726574617030000000000000000000766c616e30000000000000000000000064756d6d7930000000a37609520000000180c2000000000000000000aaaaaaaaaabb00000000000000007000000070000000a8000000736e61740000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280)
socket$inet6(0xa, 0x3, 0x20000000021)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0)

13:48:50 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x24, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x10, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}]}, 0x24}}, 0x0)

13:48:50 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="00080a80000000000300000008000100753332005800020014000500000000000000000000000000000000004000060084941ce8b13c0001000000000000000020898dde66057433b6ef3a41d22be225e0001b00000000000000000000000000000000000000000084e1a912c5998bcbf050000000000000000000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f5532e73f0e1d2c450a7decbf3431a69f9b2ecb3291bed174245a962fe0484676958265e2988326a89db3139d91fe4aee6ae7e745abdfc21a9f61f2035979c1e3e9fea5b3958bc14fce6e66a36d1ab3194534ba4e973684b27793bff837d3"], 0x84}}, 0x0)

[  633.174775][T16336] Enabling <eth:lo> not permitted
[  633.232719][T16336] Enabling of bearer <eth:lo> rejected, failed to enable media
[  633.260905][T16341] Enabling <eth:lo> not permitted
[  633.273766][T16341] Enabling of bearer <eth:lo> rejected, failed to enable media
[  633.386953][T16342] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'.
13:48:50 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468000000e1801fed9e7ff2420048ea908e", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}]}, 0x34}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000180), 0x4924924924921e1, 0x0)

13:48:50 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="00080a80000000000300000008000100753332005800020014000500000000000000000000000000000000004000060084941ce8b13c0001000000000000000020898dde66057433b6ef3a41d22be225e0001b00000000000000000000000000000000000000000084e1a912c5998bcbf050000000000000000000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f5532e73f0e1d2c450a7decbf3431a69f9b2ecb3291bed174245a962fe0484676958265e2988326a89db3139d91fe4aee6ae7e745abdfc21a9f61f2035979c1e3e9fea5b3958bc14fce6e66a36d1ab3194534ba4e973684b27793bff837d3"], 0x84}}, 0x0)

[  633.659499][T16346] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
13:48:50 executing program 0:
openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0)
socket$inet6(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc)
ioprio_get$uid(0x3, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xfffffffffffffffd}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8)

[  633.929982][T16356] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  633.964784][T16349] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'.
13:48:51 executing program 3:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xca00, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200)
sendfile(r1, r2, 0x0, 0x7fffffa7)

13:48:51 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = fsopen(&(0x7f0000000040)='gfs2\x00', 0x0)
dup2(r1, r2)

13:48:51 executing program 5:
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
open(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000006080), 0x3ea818461ad51e9, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socket$inet6(0xa, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r5 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000040)=0x10000000006)
r6 = perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r6, r5, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280)
socket$inet6(0xa, 0x3, 0x20000000021)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0)

13:48:51 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468000000e1801fed9e7ff2420048ea908e", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}]}, 0x34}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000180), 0x4924924924921e1, 0x0)

13:48:51 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="00080a80000000000300000008000100753332005800020014000500000000000000000000000000000000004000060084941ce8b13c0001000000000000000020898dde66057433b6ef3a41d22be225e0001b00000000000000000000000000000000000000000084e1a912c5998bcbf050000000000000000000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f5532e73f0e1d2c450a7decbf3431a69f9b2ecb3291bed174245a962fe0484676958265e2988326a89db3139d91fe4aee6ae7e745abdfc21a9f61f2035979c1e3e9fea5b3958bc14fce6e66a36d1ab3194534ba4e973684b27793bff837d3"], 0x84}}, 0x0)

[  634.360352][T16373] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
13:48:51 executing program 4:
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
open(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000006080), 0x3ea818461ad51e9, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socket$inet6(0xa, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r5 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000040)=0x10000000006)
r6 = perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r6, r5, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280)
socket$inet6(0xa, 0x3, 0x20000000021)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0)

13:48:51 executing program 0:
openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0)
socket$inet6(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc)
ioprio_get$uid(0x3, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xfffffffffffffffd}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8)

[  634.517607][T16375] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'.
13:48:51 executing program 1:
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
open(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000006080), 0x3ea818461ad51e9, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socket$inet6(0xa, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r5 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000040)=0x10000000006)
r6 = perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r6, r5, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280)
socket$inet6(0xa, 0x3, 0x20000000021)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0)

13:48:51 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468000000e1801fed9e7ff2420048ea908e", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}]}, 0x34}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000180), 0x4924924924921e1, 0x0)

[  635.064438][T16402] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
13:48:52 executing program 0:
openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0)
socket$inet6(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc)
ioprio_get$uid(0x3, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xfffffffffffffffd}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8)

13:48:52 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0x12)

13:48:52 executing program 5:
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
open(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000006080), 0x3ea818461ad51e9, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socket$inet6(0xa, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r5 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000040)=0x10000000006)
r6 = perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r6, r5, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000de3e000000000000000000000000000100000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000000500000000000000000076657468305f746f5f7465616d000000644cbfb861048ff1680000000000000064756d0004300000000000000000000073797a6b616c6c8279a7e00000000000ffffffffffff000000000000ffffffffffff00000000000000007000000070000000a000000072656469726563740000000000000000000000000000000000000000000000000800000000000000ffffffff000000000b00000000000000000073797a6b616c6c65723100000000000067726574617030000000000000000000766c616e30000000000000000000000064756d6d7930000000a37609520000000180c2000000000000000000aaaaaaaaaabb00000000000000007000000070000000a8000000736e61740000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280)
socket$inet6(0xa, 0x3, 0x20000000021)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0)

13:48:52 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468000000e1801fed9e7ff2420048ea908e", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}]}, 0x34}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000180), 0x4924924924921e1, 0x0)

13:48:52 executing program 4:
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
open(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000006080), 0x3ea818461ad51e9, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socket$inet6(0xa, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r5 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000040)=0x10000000006)
r6 = perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r6, r5, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280)
socket$inet6(0xa, 0x3, 0x20000000021)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0)

13:48:52 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x25dfdbfb}, 0xa0}}, 0x0)
socket$key(0xf, 0x3, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x800000000000012, 0x1, 0x3d6b, 0x80, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0)
keyctl$join(0x1, 0x0)
sched_getscheduler(0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000180)=0x10000000003e, 0x4)
sendto$inet6(r2, &(0x7f0000000640)='\b', 0x1, 0x3fffffa, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{}, "f2ffffffffffffff", '\x00', "0100"}, 0x28)

[  635.800756][T16418] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
13:48:53 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000))
r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r3, 0x3, 0x0, 0x80000003)
write$cgroup_int(r3, &(0x7f0000000040), 0x12)
fallocate(r2, 0x3, 0xc000, 0x80000003)

13:48:53 executing program 1:
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
open(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000006080), 0x3ea818461ad51e9, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socket$inet6(0xa, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r5 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000040)=0x10000000006)
r6 = perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r6, r5, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000de3e000000000000000000000000000100000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000000500000000000000000076657468305f746f5f7465616d000000644cbfb861048ff1680000000000000064756d0004300000000000000000000073797a6b616c6c8279a7e00000000000ffffffffffff000000000000ffffffffffff00000000000000007000000070000000a000000072656469726563740000000000000000000000000000000000000000000000000800000000000000ffffffff000000000b00000000000000000073797a6b616c6c65723100000000000067726574617030000000000000000000766c616e30000000000000000000000064756d6d7930000000a37609520000000180c2000000000000000000aaaaaaaaaabb00000000000000007000000070000000a8000000736e61740000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280)
socket$inet6(0xa, 0x3, 0x20000000021)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0)

13:48:53 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x25dfdbfb}, 0xa0}}, 0x0)
socket$key(0xf, 0x3, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x800000000000012, 0x1, 0x3d6b, 0x80, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0)
keyctl$join(0x1, 0x0)
sched_getscheduler(0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000180)=0x10000000003e, 0x4)
sendto$inet6(r2, &(0x7f0000000640)='\b', 0x1, 0x3fffffa, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{}, "f2ffffffffffffff", '\x00', "0100"}, 0x28)

13:48:53 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448cb, 0x0)

13:48:53 executing program 0:
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000040))
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'})
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\b\b'})

13:48:53 executing program 2:
mkdir(&(0x7f0000000640)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])

13:48:53 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x25dfdbfb}, 0xa0}}, 0x0)
socket$key(0xf, 0x3, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x800000000000012, 0x1, 0x3d6b, 0x80, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0)
keyctl$join(0x1, 0x0)
sched_getscheduler(0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000180)=0x10000000003e, 0x4)
sendto$inet6(r2, &(0x7f0000000640)='\b', 0x1, 0x3fffffa, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{}, "f2ffffffffffffff", '\x00', "0100"}, 0x28)

[  636.754072][T16452] bond0: (slave bond_slave_1): Releasing backup interface
[  636.769113][T16454] overlayfs: maximum fs stacking depth exceeded
[  636.826947][T16457] overlayfs: maximum fs stacking depth exceeded
13:48:54 executing program 5:
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
open(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000006080), 0x3ea818461ad51e9, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socket$inet6(0xa, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r5 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000040)=0x10000000006)
r6 = perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r6, r5, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280)
socket$inet6(0xa, 0x3, 0x20000000021)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0)

13:48:54 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0x35, 0x0, 0x0, 0x2}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153}, 0x3e)

13:48:54 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x25dfdbfb}, 0xa0}}, 0x0)
socket$key(0xf, 0x3, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x800000000000012, 0x1, 0x3d6b, 0x80, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0)
keyctl$join(0x1, 0x0)
sched_getscheduler(0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000180)=0x10000000003e, 0x4)
sendto$inet6(r2, &(0x7f0000000640)='\b', 0x1, 0x3fffffa, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{}, "f2ffffffffffffff", '\x00', "0100"}, 0x28)

13:48:54 executing program 4:
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
open(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000006080), 0x3ea818461ad51e9, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socket$inet6(0xa, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r5 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000040)=0x10000000006)
r6 = perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r6, r5, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280)
socket$inet6(0xa, 0x3, 0x20000000021)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0)

[  637.422806][T16455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  637.506262][T16452] bond0: (slave bond_slave_1): Releasing backup interface
13:48:54 executing program 3:
r0 = socket$inet(0x2b, 0x1, 0x0)
shutdown(r0, 0x0)

13:48:54 executing program 1:
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
open(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000006080), 0x3ea818461ad51e9, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socket$inet6(0xa, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r5 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000040)=0x10000000006)
r6 = perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r6, r5, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280)
socket$inet6(0xa, 0x3, 0x20000000021)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0)

13:48:54 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
r1 = memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/.yz1\'\xff@\x8a?\x9b+\xfc\xb5\x9fq!\xdb\xfb\xb2\xd8Om\x84k\xca\x82\xd9\xb2$\xd4\xda\xba\xc9\x0eb\xb4D\x04\xe4\x82\xe0\xe2p\x99\xb5\xc8J\xe3B.y\x17\x1ae!n|\x8a\xd2H\x04\x94$$\xb6\x1c@.\x86\xf4\xcc\xfc;t;[\xab7\xf0\xb8\xd8\xbb\a\xe9]\xef\x11i', 0x1ff)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81)
r3 = dup2(r2, r1)
r4 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b})
r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r6, 0x36)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, 0x0)
write$cgroup_type(r5, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r5, 0x3, 0xc000, 0x80000003)
r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r7, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r7, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, &(0x7f00000000c0)={{0x49, 0x9}, 0x2, 0xfffffffc, 0xfffffffc, {0x16, 0xcf}, 0xa, 0x6})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'})
r8 = getpid()
timer_create(0x0, &(0x7f0000000440)={0x0, 0x1d, 0x6, @tid=r8}, &(0x7f0000000480)=<r9=>0x0)
clock_gettime(0x0, &(0x7f0000000500))
r10 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f00000001c0)=<r11=>0x0)
r12 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r12, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r12, &(0x7f00000092c0), 0x4ff, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000600)={<r13=>0x0}, &(0x7f00000005c0)=0xc)
r14 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96)
r15 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r15, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r15, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r15, 0x3, 0xc000, 0x80000003)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r15, 0x89e2, &(0x7f00000004c0)={<r16=>0xffffffffffffffff})
kcmp(r11, r13, 0x4, r14, r16)
timer_settime(r9, 0x0, 0x0, 0x0)
timer_settime(r9, 0x3, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f0000000140))
write$P9_RLINK(r3, &(0x7f0000000280)={0x7}, 0x269)
acct(&(0x7f0000000180)='./file0\x00')
ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f)
mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)

13:48:55 executing program 0:
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000040))
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'})
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\b\b'})

13:48:55 executing program 3:
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000040))
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'})
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\b\b'})

[  638.177606][T16496] bond0: (slave bond_slave_1): Releasing backup interface
13:48:55 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mlock2(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x0)

13:48:55 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @remote}}}, 0x84)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r2, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {0x81, 0x1}, {}, @raw32={[0x4]}}], 0x30)

[  638.652917][T16499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  638.773444][T16497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  638.825187][T16507] Process accounting resumed
13:48:55 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x195d, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0)
sendto$inet6(r0, &(0x7f00000002c0)="b32e986f", 0x4, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x3fffffff, 0x0, 0x0)

13:48:55 executing program 3:
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000040))
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'})
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\b\b'})

13:48:56 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4)
preadv(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1, 0x0)
sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x10a, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0)

13:48:56 executing program 0:
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000040))
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'})
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\b\b'})

13:48:56 executing program 4:
socket$kcm(0x11, 0xa, 0x300)
socket$kcm(0x10, 0x3, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0)
write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb"], 0x8)
truncate(&(0x7f0000000240)='./file0\x00', 0x90002)
sendfile(r0, r1, 0x0, 0x7fffffff)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, 0x0}, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x80080080044df9, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x4}, 0x2c)
socket$inet(0x2, 0x6, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000300))
syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10)

[  639.057307][T16517] bond0: (slave bond_slave_1): Releasing backup interface
13:48:56 executing program 1:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = dup(r1)
getsockopt$inet6_tcp_int(r2, 0x6, 0x1c, 0x0, &(0x7f0000012ffc))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0xa, 0x6, 0x0)
dup3(r5, r0, 0x0)

13:48:56 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
r1 = memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/.yz1\'\xff@\x8a?\x9b+\xfc\xb5\x9fq!\xdb\xfb\xb2\xd8Om\x84k\xca\x82\xd9\xb2$\xd4\xda\xba\xc9\x0eb\xb4D\x04\xe4\x82\xe0\xe2p\x99\xb5\xc8J\xe3B.y\x17\x1ae!n|\x8a\xd2H\x04\x94$$\xb6\x1c@.\x86\xf4\xcc\xfc;t;[\xab7\xf0\xb8\xd8\xbb\a\xe9]\xef\x11i', 0x1ff)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81)
r3 = dup2(r2, r1)
r4 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b})
r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r6, 0x36)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, 0x0)
write$cgroup_type(r5, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r5, 0x3, 0xc000, 0x80000003)
r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r7, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r7, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, &(0x7f00000000c0)={{0x49, 0x9}, 0x2, 0xfffffffc, 0xfffffffc, {0x16, 0xcf}, 0xa, 0x6})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'})
r8 = getpid()
timer_create(0x0, &(0x7f0000000440)={0x0, 0x1d, 0x6, @tid=r8}, &(0x7f0000000480)=<r9=>0x0)
clock_gettime(0x0, &(0x7f0000000500))
r10 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f00000001c0)=<r11=>0x0)
r12 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r12, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r12, &(0x7f00000092c0), 0x4ff, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000600)={<r13=>0x0}, &(0x7f00000005c0)=0xc)
r14 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96)
r15 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r15, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r15, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r15, 0x3, 0xc000, 0x80000003)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r15, 0x89e2, &(0x7f00000004c0)={<r16=>0xffffffffffffffff})
kcmp(r11, r13, 0x4, r14, r16)
timer_settime(r9, 0x0, 0x0, 0x0)
timer_settime(r9, 0x3, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f0000000140))
write$P9_RLINK(r3, &(0x7f0000000280)={0x7}, 0x269)
acct(&(0x7f0000000180)='./file0\x00')
ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f)
mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)

[  639.304031][T16505] Process accounting resumed
[  639.380051][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  639.385863][    C0] protocol 88fb is buggy, dev hsr_slave_1
13:48:56 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
r1 = memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/.yz1\'\xff@\x8a?\x9b+\xfc\xb5\x9fq!\xdb\xfb\xb2\xd8Om\x84k\xca\x82\xd9\xb2$\xd4\xda\xba\xc9\x0eb\xb4D\x04\xe4\x82\xe0\xe2p\x99\xb5\xc8J\xe3B.y\x17\x1ae!n|\x8a\xd2H\x04\x94$$\xb6\x1c@.\x86\xf4\xcc\xfc;t;[\xab7\xf0\xb8\xd8\xbb\a\xe9]\xef\x11i', 0x1ff)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81)
r3 = dup2(r2, r1)
r4 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b})
r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r6, 0x36)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, 0x0)
write$cgroup_type(r5, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r5, 0x3, 0xc000, 0x80000003)
r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r7, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r7, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, &(0x7f00000000c0)={{0x49, 0x9}, 0x2, 0xfffffffc, 0xfffffffc, {0x16, 0xcf}, 0xa, 0x6})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'})
r8 = getpid()
timer_create(0x0, &(0x7f0000000440)={0x0, 0x1d, 0x6, @tid=r8}, &(0x7f0000000480)=<r9=>0x0)
clock_gettime(0x0, &(0x7f0000000500))
r10 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f00000001c0)=<r11=>0x0)
r12 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r12, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r12, &(0x7f00000092c0), 0x4ff, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000600)={<r13=>0x0}, &(0x7f00000005c0)=0xc)
r14 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96)
r15 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r15, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r15, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r15, 0x3, 0xc000, 0x80000003)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r15, 0x89e2, &(0x7f00000004c0)={<r16=>0xffffffffffffffff})
kcmp(r11, r13, 0x4, r14, r16)
timer_settime(r9, 0x0, 0x0, 0x0)
timer_settime(r9, 0x3, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f0000000140))
write$P9_RLINK(r3, &(0x7f0000000280)={0x7}, 0x269)
acct(&(0x7f0000000180)='./file0\x00')
ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f)
mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)

[  639.587934][T16522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  639.696059][T16530] bond0: (slave bond_slave_1): Releasing backup interface
[  639.705999][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  639.706143][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  639.774284][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  639.781409][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  639.860082][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  639.865898][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  640.301250][T16534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
13:48:57 executing program 3:
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000040))
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'})
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\b\b'})

13:48:57 executing program 1:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = dup(r1)
getsockopt$inet6_tcp_int(r2, 0x6, 0x1c, 0x0, &(0x7f0000012ffc))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0xa, 0x6, 0x0)
dup3(r5, r0, 0x0)

13:48:57 executing program 4:
socket$kcm(0x11, 0xa, 0x300)
socket$kcm(0x10, 0x3, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0)
write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb"], 0x8)
truncate(&(0x7f0000000240)='./file0\x00', 0x90002)
sendfile(r0, r1, 0x0, 0x7fffffff)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, 0x0}, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x80080080044df9, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x4}, 0x2c)
socket$inet(0x2, 0x6, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000300))
syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10)

13:48:57 executing program 0:
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000040))
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'})
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\b\b'})

[  640.645871][T16564] bond0: (slave bond_slave_1): Releasing backup interface
[  641.326491][T16566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  641.379471][T16577] bond0: (slave bond_slave_1): Releasing backup interface
[  641.460033][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  641.465845][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  641.476601][T16555] Process accounting resumed
13:48:58 executing program 3:
socket$kcm(0x11, 0xa, 0x300)
socket$kcm(0x10, 0x3, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0)
write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb"], 0x8)
truncate(&(0x7f0000000240)='./file0\x00', 0x90002)
sendfile(r0, r1, 0x0, 0x7fffffff)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, 0x0}, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x80080080044df9, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x4}, 0x2c)
socket$inet(0x2, 0x6, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000300))
syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10)

13:48:58 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
r1 = memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/.yz1\'\xff@\x8a?\x9b+\xfc\xb5\x9fq!\xdb\xfb\xb2\xd8Om\x84k\xca\x82\xd9\xb2$\xd4\xda\xba\xc9\x0eb\xb4D\x04\xe4\x82\xe0\xe2p\x99\xb5\xc8J\xe3B.y\x17\x1ae!n|\x8a\xd2H\x04\x94$$\xb6\x1c@.\x86\xf4\xcc\xfc;t;[\xab7\xf0\xb8\xd8\xbb\a\xe9]\xef\x11i', 0x1ff)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81)
r3 = dup2(r2, r1)
r4 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b})
r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r6, 0x36)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, 0x0)
write$cgroup_type(r5, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r5, 0x3, 0xc000, 0x80000003)
r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r7, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r7, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, &(0x7f00000000c0)={{0x49, 0x9}, 0x2, 0xfffffffc, 0xfffffffc, {0x16, 0xcf}, 0xa, 0x6})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'})
r8 = getpid()
timer_create(0x0, &(0x7f0000000440)={0x0, 0x1d, 0x6, @tid=r8}, &(0x7f0000000480)=<r9=>0x0)
clock_gettime(0x0, &(0x7f0000000500))
r10 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f00000001c0)=<r11=>0x0)
r12 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r12, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r12, &(0x7f00000092c0), 0x4ff, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000600)={<r13=>0x0}, &(0x7f00000005c0)=0xc)
r14 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96)
r15 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r15, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r15, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r15, 0x3, 0xc000, 0x80000003)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r15, 0x89e2, &(0x7f00000004c0)={<r16=>0xffffffffffffffff})
kcmp(r11, r13, 0x4, r14, r16)
timer_settime(r9, 0x0, 0x0, 0x0)
timer_settime(r9, 0x3, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f0000000140))
write$P9_RLINK(r3, &(0x7f0000000280)={0x7}, 0x269)
acct(&(0x7f0000000180)='./file0\x00')
ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f)
mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)

[  641.825800][T16579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  641.836973][   T26] kauditd_printk_skb: 10 callbacks suppressed
[  641.837032][   T26] audit: type=1800 audit(1573220938.909:239): pid=16587 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16623 res=0
13:48:59 executing program 1:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = dup(r1)
getsockopt$inet6_tcp_int(r2, 0x6, 0x1c, 0x0, &(0x7f0000012ffc))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0xa, 0x6, 0x0)
dup3(r5, r0, 0x0)

13:48:59 executing program 4:
socket$kcm(0x11, 0xa, 0x300)
socket$kcm(0x10, 0x3, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0)
write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb"], 0x8)
truncate(&(0x7f0000000240)='./file0\x00', 0x90002)
sendfile(r0, r1, 0x0, 0x7fffffff)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, 0x0}, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x80080080044df9, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x4}, 0x2c)
socket$inet(0x2, 0x6, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000300))
syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10)

13:48:59 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
r1 = memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/.yz1\'\xff@\x8a?\x9b+\xfc\xb5\x9fq!\xdb\xfb\xb2\xd8Om\x84k\xca\x82\xd9\xb2$\xd4\xda\xba\xc9\x0eb\xb4D\x04\xe4\x82\xe0\xe2p\x99\xb5\xc8J\xe3B.y\x17\x1ae!n|\x8a\xd2H\x04\x94$$\xb6\x1c@.\x86\xf4\xcc\xfc;t;[\xab7\xf0\xb8\xd8\xbb\a\xe9]\xef\x11i', 0x1ff)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81)
r3 = dup2(r2, r1)
r4 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b})
r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r6, 0x36)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, 0x0)
write$cgroup_type(r5, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r5, 0x3, 0xc000, 0x80000003)
r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r7, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r7, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, &(0x7f00000000c0)={{0x49, 0x9}, 0x2, 0xfffffffc, 0xfffffffc, {0x16, 0xcf}, 0xa, 0x6})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'})
r8 = getpid()
timer_create(0x0, &(0x7f0000000440)={0x0, 0x1d, 0x6, @tid=r8}, &(0x7f0000000480)=<r9=>0x0)
clock_gettime(0x0, &(0x7f0000000500))
r10 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f00000001c0)=<r11=>0x0)
r12 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r12, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r12, &(0x7f00000092c0), 0x4ff, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000600)={<r13=>0x0}, &(0x7f00000005c0)=0xc)
r14 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96)
r15 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r15, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r15, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r15, 0x3, 0xc000, 0x80000003)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r15, 0x89e2, &(0x7f00000004c0)={<r16=>0xffffffffffffffff})
kcmp(r11, r13, 0x4, r14, r16)
timer_settime(r9, 0x0, 0x0, 0x0)
timer_settime(r9, 0x3, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f0000000140))
write$P9_RLINK(r3, &(0x7f0000000280)={0x7}, 0x269)
acct(&(0x7f0000000180)='./file0\x00')
ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f)
mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)

13:48:59 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
r1 = memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/.yz1\'\xff@\x8a?\x9b+\xfc\xb5\x9fq!\xdb\xfb\xb2\xd8Om\x84k\xca\x82\xd9\xb2$\xd4\xda\xba\xc9\x0eb\xb4D\x04\xe4\x82\xe0\xe2p\x99\xb5\xc8J\xe3B.y\x17\x1ae!n|\x8a\xd2H\x04\x94$$\xb6\x1c@.\x86\xf4\xcc\xfc;t;[\xab7\xf0\xb8\xd8\xbb\a\xe9]\xef\x11i', 0x1ff)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81)
r3 = dup2(r2, r1)
r4 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b})
r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r6, 0x36)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, 0x0)
write$cgroup_type(r5, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r5, 0x3, 0xc000, 0x80000003)
r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r7, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r7, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, &(0x7f00000000c0)={{0x49, 0x9}, 0x2, 0xfffffffc, 0xfffffffc, {0x16, 0xcf}, 0xa, 0x6})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'})
r8 = getpid()
timer_create(0x0, &(0x7f0000000440)={0x0, 0x1d, 0x6, @tid=r8}, &(0x7f0000000480)=<r9=>0x0)
clock_gettime(0x0, &(0x7f0000000500))
r10 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f00000001c0)=<r11=>0x0)
r12 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r12, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r12, &(0x7f00000092c0), 0x4ff, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000600)={<r13=>0x0}, &(0x7f00000005c0)=0xc)
r14 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96)
r15 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r15, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r15, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r15, 0x3, 0xc000, 0x80000003)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r15, 0x89e2, &(0x7f00000004c0)={<r16=>0xffffffffffffffff})
kcmp(r11, r13, 0x4, r14, r16)
timer_settime(r9, 0x0, 0x0, 0x0)
timer_settime(r9, 0x3, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f0000000140))
write$P9_RLINK(r3, &(0x7f0000000280)={0x7}, 0x269)
acct(&(0x7f0000000180)='./file0\x00')
ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f)
mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)

[  642.129637][T16561] Process accounting resumed
13:48:59 executing program 1:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = dup(r1)
getsockopt$inet6_tcp_int(r2, 0x6, 0x1c, 0x0, &(0x7f0000012ffc))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0xa, 0x6, 0x0)
dup3(r5, r0, 0x0)

13:49:00 executing program 3:
socket$kcm(0x11, 0xa, 0x300)
socket$kcm(0x10, 0x3, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0)
write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb"], 0x8)
truncate(&(0x7f0000000240)='./file0\x00', 0x90002)
sendfile(r0, r1, 0x0, 0x7fffffff)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, 0x0}, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x80080080044df9, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x4}, 0x2c)
socket$inet(0x2, 0x6, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000300))
syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10)

13:49:00 executing program 4:
socket$kcm(0x11, 0xa, 0x300)
socket$kcm(0x10, 0x3, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0)
write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb"], 0x8)
truncate(&(0x7f0000000240)='./file0\x00', 0x90002)
sendfile(r0, r1, 0x0, 0x7fffffff)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, 0x0}, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x80080080044df9, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x4}, 0x2c)
socket$inet(0x2, 0x6, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000300))
syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10)

13:49:00 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0)
dup(r0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
r1 = syz_open_pts(r0, 0x4000000000005)
r2 = dup3(r1, r0, 0x0)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0xfffffffc, 0x3f})
write$UHID_INPUT(r2, &(0x7f00000015c0)={0x8, "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", 0x1000}, 0x1006)

[  644.164693][T16590] Process accounting resumed
13:49:01 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
r1 = memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/.yz1\'\xff@\x8a?\x9b+\xfc\xb5\x9fq!\xdb\xfb\xb2\xd8Om\x84k\xca\x82\xd9\xb2$\xd4\xda\xba\xc9\x0eb\xb4D\x04\xe4\x82\xe0\xe2p\x99\xb5\xc8J\xe3B.y\x17\x1ae!n|\x8a\xd2H\x04\x94$$\xb6\x1c@.\x86\xf4\xcc\xfc;t;[\xab7\xf0\xb8\xd8\xbb\a\xe9]\xef\x11i', 0x1ff)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81)
r3 = dup2(r2, r1)
r4 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b})
r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r6, 0x36)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, 0x0)
write$cgroup_type(r5, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r5, 0x3, 0xc000, 0x80000003)
r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r7, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r7, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, &(0x7f00000000c0)={{0x49, 0x9}, 0x2, 0xfffffffc, 0xfffffffc, {0x16, 0xcf}, 0xa, 0x6})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'})
r8 = getpid()
timer_create(0x0, &(0x7f0000000440)={0x0, 0x1d, 0x6, @tid=r8}, &(0x7f0000000480)=<r9=>0x0)
clock_gettime(0x0, &(0x7f0000000500))
r10 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f00000001c0)=<r11=>0x0)
r12 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r12, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r12, &(0x7f00000092c0), 0x4ff, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000600)={<r13=>0x0}, &(0x7f00000005c0)=0xc)
r14 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96)
r15 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r15, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r15, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r15, 0x3, 0xc000, 0x80000003)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r15, 0x89e2, &(0x7f00000004c0)={<r16=>0xffffffffffffffff})
kcmp(r11, r13, 0x4, r14, r16)
timer_settime(r9, 0x0, 0x0, 0x0)
timer_settime(r9, 0x3, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f0000000140))
write$P9_RLINK(r3, &(0x7f0000000280)={0x7}, 0x269)
acct(&(0x7f0000000180)='./file0\x00')
ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f)
mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)

13:49:01 executing program 1:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00')
r2 = dup2(r0, r1)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f00000005c0), 0x4)

[  644.418718][T16620] Process accounting resumed
13:49:01 executing program 4:
mkdir(0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x23, 0x847, 0x0, 0x0, {0x2804}}, 0x14}}, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33c, 0xf0ffff)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x0, 0x9b, 0x1, 0x915, 0x0, [{0x1f, 0x7f, 0x2, [], 0x5}, {0x0, 0x4, 0x0, [], 0xf7}, {0x0, 0x8, 0xa, [], 0x6}, {0x5, 0x9}, {0x3, 0x5, 0x1, [], 0x5}, {0x2, 0x7f, 0x0, [], 0x9}, {0x80, 0xa6, 0xff, [], 0x8f}, {0x3, 0x2, 0x3f, [], 0x40}, {0x2, 0x0, 0x0, [], 0x80}, {0x7, 0x2, 0x6, [], 0x7f}, {0x0, 0x57}, {0x8, 0x2, 0x50, [], 0xfd}, {0x7, 0x9, 0x1, [], 0x1}, {0x2, 0x9, 0xfb, [], 0xf8}, {0x5, 0x5, 0x7, [], 0x81}, {0x7, 0x3f, 0x8, [], 0x9d}, {0x1f, 0x9, 0x7e, [], 0x3}, {0x6, 0x6d, 0x7, [], 0x8}, {0x82, 0xfd, 0x0, [], 0x3d}, {0x0, 0x40, 0x8}, {0x0, 0x5, 0x2, [], 0xcf}, {0x0, 0xe0, 0x2}, {0x67, 0x0, 0x0, [], 0x9b}, {0x91, 0xbf, 0x1, [], 0xff}]}})
socket$key(0xf, 0x3, 0x2)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
socket$netlink(0x10, 0x3, 0x0)
rmdir(0x0)
ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f00000001c0))
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="f80000001658ee9c9f000000000000521700001e000000007f0000000000000000456b3c2067ecfffffffffffff5a5a13618b9ff0000951acfb40000", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0)

13:49:01 executing program 1:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @reserved}, 0x10)

13:49:01 executing program 3:
socket$kcm(0x11, 0xa, 0x300)
socket$kcm(0x10, 0x3, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0)
write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1057ccb0b32db9fb"], 0x8)
truncate(&(0x7f0000000240)='./file0\x00', 0x90002)
sendfile(r0, r1, 0x0, 0x7fffffff)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, 0x0}, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x80080080044df9, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x4}, 0x2c)
socket$inet(0x2, 0x6, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000300))
syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10)

13:49:01 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
r1 = memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/.yz1\'\xff@\x8a?\x9b+\xfc\xb5\x9fq!\xdb\xfb\xb2\xd8Om\x84k\xca\x82\xd9\xb2$\xd4\xda\xba\xc9\x0eb\xb4D\x04\xe4\x82\xe0\xe2p\x99\xb5\xc8J\xe3B.y\x17\x1ae!n|\x8a\xd2H\x04\x94$$\xb6\x1c@.\x86\xf4\xcc\xfc;t;[\xab7\xf0\xb8\xd8\xbb\a\xe9]\xef\x11i', 0x1ff)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81)
r3 = dup2(r2, r1)
r4 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b})
r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r6, 0x36)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, 0x0)
write$cgroup_type(r5, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r5, 0x3, 0xc000, 0x80000003)
r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r7, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r7, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, &(0x7f00000000c0)={{0x49, 0x9}, 0x2, 0xfffffffc, 0xfffffffc, {0x16, 0xcf}, 0xa, 0x6})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'})
r8 = getpid()
timer_create(0x0, &(0x7f0000000440)={0x0, 0x1d, 0x6, @tid=r8}, &(0x7f0000000480)=<r9=>0x0)
clock_gettime(0x0, &(0x7f0000000500))
r10 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f00000001c0)=<r11=>0x0)
r12 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r12, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r12, &(0x7f00000092c0), 0x4ff, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000600)={<r13=>0x0}, &(0x7f00000005c0)=0xc)
r14 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96)
r15 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r15, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r15, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r15, 0x3, 0xc000, 0x80000003)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r15, 0x89e2, &(0x7f00000004c0)={<r16=>0xffffffffffffffff})
kcmp(r11, r13, 0x4, r14, r16)
timer_settime(r9, 0x0, 0x0, 0x0)
timer_settime(r9, 0x3, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f0000000140))
write$P9_RLINK(r3, &(0x7f0000000280)={0x7}, 0x269)
acct(&(0x7f0000000180)='./file0\x00')
ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f)
mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)

[  645.481926][T16602] Process accounting resumed
13:49:02 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
r1 = memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/.yz1\'\xff@\x8a?\x9b+\xfc\xb5\x9fq!\xdb\xfb\xb2\xd8Om\x84k\xca\x82\xd9\xb2$\xd4\xda\xba\xc9\x0eb\xb4D\x04\xe4\x82\xe0\xe2p\x99\xb5\xc8J\xe3B.y\x17\x1ae!n|\x8a\xd2H\x04\x94$$\xb6\x1c@.\x86\xf4\xcc\xfc;t;[\xab7\xf0\xb8\xd8\xbb\a\xe9]\xef\x11i', 0x1ff)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81)
r3 = dup2(r2, r1)
r4 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b})
r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r6, 0x36)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, 0x0)
write$cgroup_type(r5, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r5, 0x3, 0xc000, 0x80000003)
r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r7, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r7, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, &(0x7f00000000c0)={{0x49, 0x9}, 0x2, 0xfffffffc, 0xfffffffc, {0x16, 0xcf}, 0xa, 0x6})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'})
r8 = getpid()
timer_create(0x0, &(0x7f0000000440)={0x0, 0x1d, 0x6, @tid=r8}, &(0x7f0000000480)=<r9=>0x0)
clock_gettime(0x0, &(0x7f0000000500))
r10 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f00000001c0)=<r11=>0x0)
r12 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r12, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r12, &(0x7f00000092c0), 0x4ff, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000600)={<r13=>0x0}, &(0x7f00000005c0)=0xc)
r14 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96)
r15 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r15, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r15, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r15, 0x3, 0xc000, 0x80000003)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r15, 0x89e2, &(0x7f00000004c0)={<r16=>0xffffffffffffffff})
kcmp(r11, r13, 0x4, r14, r16)
timer_settime(r9, 0x0, 0x0, 0x0)
timer_settime(r9, 0x3, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f0000000140))
write$P9_RLINK(r3, &(0x7f0000000280)={0x7}, 0x269)
acct(&(0x7f0000000180)='./file0\x00')
ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f)
mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)

13:49:02 executing program 1:
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYRESOCT, @ANYBLOB="5e168b21f3d02ad0d4b59b3f", @ANYRES64], 0x2b)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="73d5abe237eb0f64be744b701190c9c7a59d30eb26", 0x15}], 0x1}}], 0x1, 0x8050)
splice(r0, 0x0, r3, 0x0, 0x19404, 0x0)

[  645.642369][    C0] net_ratelimit: 16 callbacks suppressed
[  645.648210][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  645.657115][    C0] protocol 88fb is buggy, dev hsr_slave_1
13:49:02 executing program 1:
syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0xfffffd7a, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x87<B%\xd1g\xd6\xe3\xca8\x9aT\x0e\xf5iA\x05\x13\x02\x14\to\xca\xf7\x04\x15U2\xaef\x1d\xb6\x9f')
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

[  646.033200][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  646.049407][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  646.057743][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  646.069154][    C1] protocol 88fb is buggy, dev hsr_slave_1
13:49:03 executing program 4:
mkdir(0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x23, 0x847, 0x0, 0x0, {0x2804}}, 0x14}}, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33c, 0xf0ffff)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x0, 0x9b, 0x1, 0x915, 0x0, [{0x1f, 0x7f, 0x2, [], 0x5}, {0x0, 0x4, 0x0, [], 0xf7}, {0x0, 0x8, 0xa, [], 0x6}, {0x5, 0x9}, {0x3, 0x5, 0x1, [], 0x5}, {0x2, 0x7f, 0x0, [], 0x9}, {0x80, 0xa6, 0xff, [], 0x8f}, {0x3, 0x2, 0x3f, [], 0x40}, {0x2, 0x0, 0x0, [], 0x80}, {0x7, 0x2, 0x6, [], 0x7f}, {0x0, 0x57}, {0x8, 0x2, 0x50, [], 0xfd}, {0x7, 0x9, 0x1, [], 0x1}, {0x2, 0x9, 0xfb, [], 0xf8}, {0x5, 0x5, 0x7, [], 0x81}, {0x7, 0x3f, 0x8, [], 0x9d}, {0x1f, 0x9, 0x7e, [], 0x3}, {0x6, 0x6d, 0x7, [], 0x8}, {0x82, 0xfd, 0x0, [], 0x3d}, {0x0, 0x40, 0x8}, {0x0, 0x5, 0x2, [], 0xcf}, {0x0, 0xe0, 0x2}, {0x67, 0x0, 0x0, [], 0x9b}, {0x91, 0xbf, 0x1, [], 0xff}]}})
socket$key(0xf, 0x3, 0x2)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
socket$netlink(0x10, 0x3, 0x0)
rmdir(0x0)
ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f00000001c0))
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="f80000001658ee9c9f000000000000521700001e000000007f0000000000000000456b3c2067ecfffffffffffff5a5a13618b9ff0000951acfb40000", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0)

[  646.137005][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  646.147686][    C0] protocol 88fb is buggy, dev hsr_slave_1
13:49:03 executing program 3:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
chdir(&(0x7f0000000200)='./file0\x00')
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}<B\xfc.\x9cia\x14\xa6\xf8\x88\xf0\xda\x85\'v\x83\xcf\xc1\xc4\xd2\xbfq\xc2U\xa3\x13Md\xcc?\xed\x8e\x97y\x8d\xeb\x861\xcb\xf7h,\x9f\xa2\xed\x03\x14e\xaa\x19\x1d\xf9\"\xf7d)|\xba\"\xa8I\x9d\x17\x7fI\xfb\xa9@\xf5[\xbc\x8br?\xd3t\xf1\xfe\xd7\x8c\x8a\xee\xc6\x81\x1d\x9bXyHs\x87\xd5e\x94\xa1L%\x88\'M\xe8O\xa2v\x100+?\xb5Ar\xa8\xc9\x10\xa0~|v\xeaFZ\xa6\x84\x02', 0x0, 0x0)

13:49:03 executing program 1:
syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0xfffffd7a, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x87<B%\xd1g\xd6\xe3\xca8\x9aT\x0e\xf5iA\x05\x13\x02\x14\to\xca\xf7\x04\x15U2\xaef\x1d\xb6\x9f')
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

[  646.989928][T16646] Process accounting resumed
13:49:04 executing program 5:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$inet(0x10, 0x80003, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105008100000a1f0000030028080008000c0004", 0x21}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
r3 = socket$inet(0x2, 0x80a, 0x0)
r4 = socket$inet(0x2, 0x80a, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

13:49:04 executing program 2:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
r2 = epoll_create(0xfff)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200))
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
epoll_wait(r2, &(0x7f0000000180)=[{}], 0x1, 0xfffffffffffffffe)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
dup2(r4, r1)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[  647.043254][T16667] Process accounting resumed
13:49:04 executing program 1:
syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0xfffffd7a, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x87<B%\xd1g\xd6\xe3\xca8\x9aT\x0e\xf5iA\x05\x13\x02\x14\to\xca\xf7\x04\x15U2\xaef\x1d\xb6\x9f')
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

13:49:04 executing program 3:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0xb)

13:49:04 executing program 4:
mkdir(0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x23, 0x847, 0x0, 0x0, {0x2804}}, 0x14}}, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33c, 0xf0ffff)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x0, 0x9b, 0x1, 0x915, 0x0, [{0x1f, 0x7f, 0x2, [], 0x5}, {0x0, 0x4, 0x0, [], 0xf7}, {0x0, 0x8, 0xa, [], 0x6}, {0x5, 0x9}, {0x3, 0x5, 0x1, [], 0x5}, {0x2, 0x7f, 0x0, [], 0x9}, {0x80, 0xa6, 0xff, [], 0x8f}, {0x3, 0x2, 0x3f, [], 0x40}, {0x2, 0x0, 0x0, [], 0x80}, {0x7, 0x2, 0x6, [], 0x7f}, {0x0, 0x57}, {0x8, 0x2, 0x50, [], 0xfd}, {0x7, 0x9, 0x1, [], 0x1}, {0x2, 0x9, 0xfb, [], 0xf8}, {0x5, 0x5, 0x7, [], 0x81}, {0x7, 0x3f, 0x8, [], 0x9d}, {0x1f, 0x9, 0x7e, [], 0x3}, {0x6, 0x6d, 0x7, [], 0x8}, {0x82, 0xfd, 0x0, [], 0x3d}, {0x0, 0x40, 0x8}, {0x0, 0x5, 0x2, [], 0xcf}, {0x0, 0xe0, 0x2}, {0x67, 0x0, 0x0, [], 0x9b}, {0x91, 0xbf, 0x1, [], 0xff}]}})
socket$key(0xf, 0x3, 0x2)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
socket$netlink(0x10, 0x3, 0x0)
rmdir(0x0)
ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f00000001c0))
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="f80000001658ee9c9f000000000000521700001e000000007f0000000000000000456b3c2067ecfffffffffffff5a5a13618b9ff0000951acfb40000", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0)

13:49:04 executing program 1:
syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0xfffffd7a, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x87<B%\xd1g\xd6\xe3\xca8\x9aT\x0e\xf5iA\x05\x13\x02\x14\to\xca\xf7\x04\x15U2\xaef\x1d\xb6\x9f')
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

13:49:04 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
r1 = memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/.yz1\'\xff@\x8a?\x9b+\xfc\xb5\x9fq!\xdb\xfb\xb2\xd8Om\x84k\xca\x82\xd9\xb2$\xd4\xda\xba\xc9\x0eb\xb4D\x04\xe4\x82\xe0\xe2p\x99\xb5\xc8J\xe3B.y\x17\x1ae!n|\x8a\xd2H\x04\x94$$\xb6\x1c@.\x86\xf4\xcc\xfc;t;[\xab7\xf0\xb8\xd8\xbb\a\xe9]\xef\x11i', 0x1ff)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81)
r3 = dup2(r2, r1)
r4 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b})
r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r6, 0x36)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, 0x0)
write$cgroup_type(r5, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r5, 0x3, 0xc000, 0x80000003)
r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r7, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r7, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, &(0x7f00000000c0)={{0x49, 0x9}, 0x2, 0xfffffffc, 0xfffffffc, {0x16, 0xcf}, 0xa, 0x6})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'})
r8 = getpid()
timer_create(0x0, &(0x7f0000000440)={0x0, 0x1d, 0x6, @tid=r8}, &(0x7f0000000480)=<r9=>0x0)
clock_gettime(0x0, &(0x7f0000000500))
r10 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f00000001c0)=<r11=>0x0)
r12 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r12, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r12, &(0x7f00000092c0), 0x4ff, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000600)={<r13=>0x0}, &(0x7f00000005c0)=0xc)
r14 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96)
r15 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r15, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r15, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r15, 0x3, 0xc000, 0x80000003)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r15, 0x89e2, &(0x7f00000004c0)={<r16=>0xffffffffffffffff})
kcmp(r11, r13, 0x4, r14, r16)
timer_settime(r9, 0x0, 0x0, 0x0)
timer_settime(r9, 0x3, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f0000000140))
write$P9_RLINK(r3, &(0x7f0000000280)={0x7}, 0x269)
acct(&(0x7f0000000180)='./file0\x00')
ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f)
mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)

13:49:04 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000002c0))
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080))

[  647.852620][T16679] Process accounting resumed
13:49:05 executing program 2:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
r2 = epoll_create(0xfff)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200))
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
epoll_wait(r2, &(0x7f0000000180)=[{}], 0x1, 0xfffffffffffffffe)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
dup2(r4, r1)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

13:49:05 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x34, r1, 0x31, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x34}}, 0x0)

13:49:05 executing program 3:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = socket(0x1e, 0x1, 0x0)
sendmsg(r2, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf32(r2, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4020ae46, &(0x7f0000000080)=ANY=[@ANYBLOB="0e0100000b00000000003f00060000000000000000000000000000000000000083f8d2440000000000000000"])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/ddv/o\x02\x00', 0x40, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)

13:49:05 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000280)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='stat\x00X\xe1\x7f6\xf2Dk\xeb\x1c\xf4\xf3\xa9\x9e\xbdA\xcdy\xb2\x17\xcd\x90\xfe\x04>\x130\xba\xf8Z\xbe\xa3\xcc\x06Wv\x9d\xd8\x1c ,1\xa24\xb7\xe1\x85\x1aX\x04u\xdaAh\xfd\x86\xeb\xfcc\xe0\xa5\x154\xfe\x8c\xd9q>\xd0\x00\x00\n\x9cp\x9e\n\xb9\x13\xc6r\x12\x84\x18\xcd\xf5\xf3\x9a\xa6+\x9d\x1ba5\x90$-\xb5\x02\xc2M\x05A%\xd7\x99@**M3\xe2A\xd8}v\xfd\xe1\xbf5\xc4\x12!\'\xaf\xef\x058?\xa6\x94\fw\x9fq\x06\a(s9Mwr\xd1\x8b\x8b\xdf')
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
preadv(r0, &(0x7f00000017c0), 0x19b, 0x0)

13:49:05 executing program 4:
mkdir(0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x23, 0x847, 0x0, 0x0, {0x2804}}, 0x14}}, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33c, 0xf0ffff)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x0, 0x9b, 0x1, 0x915, 0x0, [{0x1f, 0x7f, 0x2, [], 0x5}, {0x0, 0x4, 0x0, [], 0xf7}, {0x0, 0x8, 0xa, [], 0x6}, {0x5, 0x9}, {0x3, 0x5, 0x1, [], 0x5}, {0x2, 0x7f, 0x0, [], 0x9}, {0x80, 0xa6, 0xff, [], 0x8f}, {0x3, 0x2, 0x3f, [], 0x40}, {0x2, 0x0, 0x0, [], 0x80}, {0x7, 0x2, 0x6, [], 0x7f}, {0x0, 0x57}, {0x8, 0x2, 0x50, [], 0xfd}, {0x7, 0x9, 0x1, [], 0x1}, {0x2, 0x9, 0xfb, [], 0xf8}, {0x5, 0x5, 0x7, [], 0x81}, {0x7, 0x3f, 0x8, [], 0x9d}, {0x1f, 0x9, 0x7e, [], 0x3}, {0x6, 0x6d, 0x7, [], 0x8}, {0x82, 0xfd, 0x0, [], 0x3d}, {0x0, 0x40, 0x8}, {0x0, 0x5, 0x2, [], 0xcf}, {0x0, 0xe0, 0x2}, {0x67, 0x0, 0x0, [], 0x9b}, {0x91, 0xbf, 0x1, [], 0xff}]}})
socket$key(0xf, 0x3, 0x2)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
socket$netlink(0x10, 0x3, 0x0)
rmdir(0x0)
ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f00000001c0))
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="f80000001658ee9c9f000000000000521700001e000000007f0000000000000000456b3c2067ecfffffffffffff5a5a13618b9ff0000951acfb40000", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0)

13:49:05 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000001c0), 0x10)

13:49:06 executing program 2:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
r2 = epoll_create(0xfff)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200))
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
epoll_wait(r2, &(0x7f0000000180)=[{}], 0x1, 0xfffffffffffffffe)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
dup2(r4, r1)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

13:49:06 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000280)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='stat\x00X\xe1\x7f6\xf2Dk\xeb\x1c\xf4\xf3\xa9\x9e\xbdA\xcdy\xb2\x17\xcd\x90\xfe\x04>\x130\xba\xf8Z\xbe\xa3\xcc\x06Wv\x9d\xd8\x1c ,1\xa24\xb7\xe1\x85\x1aX\x04u\xdaAh\xfd\x86\xeb\xfcc\xe0\xa5\x154\xfe\x8c\xd9q>\xd0\x00\x00\n\x9cp\x9e\n\xb9\x13\xc6r\x12\x84\x18\xcd\xf5\xf3\x9a\xa6+\x9d\x1ba5\x90$-\xb5\x02\xc2M\x05A%\xd7\x99@**M3\xe2A\xd8}v\xfd\xe1\xbf5\xc4\x12!\'\xaf\xef\x058?\xa6\x94\fw\x9fq\x06\a(s9Mwr\xd1\x8b\x8b\xdf')
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
preadv(r0, &(0x7f00000017c0), 0x19b, 0x0)

[  649.800684][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  649.809355][    C0] protocol 88fb is buggy, dev hsr_slave_1
13:49:07 executing program 3:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = socket(0x1e, 0x1, 0x0)
sendmsg(r2, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf32(r2, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4020ae46, &(0x7f0000000080)=ANY=[@ANYBLOB="0e0100000b00000000003f00060000000000000000000000000000000000000083f8d2440000000000000000"])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/ddv/o\x02\x00', 0x40, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)

13:49:07 executing program 4:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = socket(0x1e, 0x1, 0x0)
sendmsg(r2, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf32(r2, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4020ae46, &(0x7f0000000080)=ANY=[@ANYBLOB="0e0100000b00000000003f00060000000000000000000000000000000000000083f8d2440000000000000000"])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/ddv/o\x02\x00', 0x40, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)

[  650.574591][T16734] Process accounting resumed
13:49:07 executing program 0:
syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00')
r0 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x87<B%\xd1g\xd6\xe3\xca8\x9aT\x0e\xf5iA\x05\x13\x02\x14\to\xca\xf7\x04\x15U2\xaef\x1d\xb6\x9f')
read(r1, &(0x7f0000000200)=""/17, 0xfffffd37)
fchdir(r0)
quotactl(0x2080000203, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0))

13:49:07 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000600)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t5,\xffx\xf0\xde\xc4\xa8M*\xe4;~y\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_6\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93<s\x18\xb7\xbc\xc3\xc5o\xd7\x0fu4(c\xa4\xd6u\xe8/\xaaO\xa4\xff\xea\xb1\x96\xdbIW\x9c\xcc\x00#\x00\x00\x00\x00\x00\x00\x00\x00\x00')
r1 = openat$cgroup_ro(r0, &(0x7f00000004c0)='mem\x00aS.cur\x89\xc9J\x01\xe3\x00\x00\x00\x00\x00U\xe9{\x04\xa75\r\xa9\r\x99\xe8[{\xbd\\X}\xee\xc2\x99\xebv\x10PCN?\xa6\xde\xefko\x93\xbf\xc27\xbc\xee\xbe\xfd\xec\xf7\xab\xf2\xf5\xec@\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\xcc\x88|\x86j\xdd3\xada\xe7\x01\xe1?m\x83S,\xccoQc\vG\x1d\xea\x9f\x1c!\xf6\x17\xb4b\x9c\x8f}\xcc~\x878\x1e\xe3\xfdq%\\\x1d_\x1b6\xadcPZw\xd4w\x99*aG\x1b\x14\xda\xed1\xed41\x06\x8c\a\xe3\xf3\xa3\n\xc3\xd5\xbb\xa9]{\xfa-\xba\x11\xdbNH\x99\xed\x1c\xe9\xcc\x1b\x1b&x;\xc4W\xe1\x11\xe3\xd0\x05W\xfb\x95f\xaaC\x96\xbe\'\xe6\xce\x1d\xf4\xa3|\x14\xa7NE\xb8\xc9\xeeD\xfb\x00\x00\x00\x00\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c)
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x10)

13:49:07 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000280)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='stat\x00X\xe1\x7f6\xf2Dk\xeb\x1c\xf4\xf3\xa9\x9e\xbdA\xcdy\xb2\x17\xcd\x90\xfe\x04>\x130\xba\xf8Z\xbe\xa3\xcc\x06Wv\x9d\xd8\x1c ,1\xa24\xb7\xe1\x85\x1aX\x04u\xdaAh\xfd\x86\xeb\xfcc\xe0\xa5\x154\xfe\x8c\xd9q>\xd0\x00\x00\n\x9cp\x9e\n\xb9\x13\xc6r\x12\x84\x18\xcd\xf5\xf3\x9a\xa6+\x9d\x1ba5\x90$-\xb5\x02\xc2M\x05A%\xd7\x99@**M3\xe2A\xd8}v\xfd\xe1\xbf5\xc4\x12!\'\xaf\xef\x058?\xa6\x94\fw\x9fq\x06\a(s9Mwr\xd1\x8b\x8b\xdf')
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
preadv(r0, &(0x7f00000017c0), 0x19b, 0x0)

13:49:08 executing program 4:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = socket(0x1e, 0x1, 0x0)
sendmsg(r2, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf32(r2, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4020ae46, &(0x7f0000000080)=ANY=[@ANYBLOB="0e0100000b00000000003f00060000000000000000000000000000000000000083f8d2440000000000000000"])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/ddv/o\x02\x00', 0x40, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)

13:49:08 executing program 0:
syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00')
r0 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x87<B%\xd1g\xd6\xe3\xca8\x9aT\x0e\xf5iA\x05\x13\x02\x14\to\xca\xf7\x04\x15U2\xaef\x1d\xb6\x9f')
read(r1, &(0x7f0000000200)=""/17, 0xfffffd37)
fchdir(r0)
quotactl(0x2080000203, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0))

13:49:08 executing program 3:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = socket(0x1e, 0x1, 0x0)
sendmsg(r2, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf32(r2, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4020ae46, &(0x7f0000000080)=ANY=[@ANYBLOB="0e0100000b00000000003f00060000000000000000000000000000000000000083f8d2440000000000000000"])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/ddv/o\x02\x00', 0x40, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)

13:49:08 executing program 2:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
r2 = epoll_create(0xfff)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200))
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
epoll_wait(r2, &(0x7f0000000180)=[{}], 0x1, 0xfffffffffffffffe)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
dup2(r4, r1)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

13:49:08 executing program 0:
syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00')
r0 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x87<B%\xd1g\xd6\xe3\xca8\x9aT\x0e\xf5iA\x05\x13\x02\x14\to\xca\xf7\x04\x15U2\xaef\x1d\xb6\x9f')
read(r1, &(0x7f0000000200)=""/17, 0xfffffd37)
fchdir(r0)
quotactl(0x2080000203, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0))

13:49:08 executing program 1:
r0 = socket$l2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x2, [{}, {}]}, 0x48)
connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x3a)
setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x4, 0x20000000, 0x1c7)

13:49:08 executing program 4:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = socket(0x1e, 0x1, 0x0)
sendmsg(r2, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf32(r2, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4020ae46, &(0x7f0000000080)=ANY=[@ANYBLOB="0e0100000b00000000003f00060000000000000000000000000000000000000083f8d2440000000000000000"])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/ddv/o\x02\x00', 0x40, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)

13:49:09 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000280)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='stat\x00X\xe1\x7f6\xf2Dk\xeb\x1c\xf4\xf3\xa9\x9e\xbdA\xcdy\xb2\x17\xcd\x90\xfe\x04>\x130\xba\xf8Z\xbe\xa3\xcc\x06Wv\x9d\xd8\x1c ,1\xa24\xb7\xe1\x85\x1aX\x04u\xdaAh\xfd\x86\xeb\xfcc\xe0\xa5\x154\xfe\x8c\xd9q>\xd0\x00\x00\n\x9cp\x9e\n\xb9\x13\xc6r\x12\x84\x18\xcd\xf5\xf3\x9a\xa6+\x9d\x1ba5\x90$-\xb5\x02\xc2M\x05A%\xd7\x99@**M3\xe2A\xd8}v\xfd\xe1\xbf5\xc4\x12!\'\xaf\xef\x058?\xa6\x94\fw\x9fq\x06\a(s9Mwr\xd1\x8b\x8b\xdf')
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
preadv(r0, &(0x7f00000017c0), 0x19b, 0x0)

13:49:09 executing program 0:
syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00')
r0 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x87<B%\xd1g\xd6\xe3\xca8\x9aT\x0e\xf5iA\x05\x13\x02\x14\to\xca\xf7\x04\x15U2\xaef\x1d\xb6\x9f')
read(r1, &(0x7f0000000200)=""/17, 0xfffffd37)
fchdir(r0)
quotactl(0x2080000203, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0))

13:49:09 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="24000000200007041dfffd946f6105000a0000001f2d1f01030008f8040016000400ff7e", 0x24}], 0x1}, 0x0)

13:49:09 executing program 1:
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x6}}, 0x10)
close(r0)

13:49:09 executing program 3:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = socket(0x1e, 0x1, 0x0)
sendmsg(r2, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf32(r2, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4020ae46, &(0x7f0000000080)=ANY=[@ANYBLOB="0e0100000b00000000003f00060000000000000000000000000000000000000083f8d2440000000000000000"])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/ddv/o\x02\x00', 0x40, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)

13:49:09 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newsa={0x138, 0x1a, 0x801, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast1}, {@in, 0x0, 0x6c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

[  652.460466][T16839] netlink: 'syz-executor.4': attribute type 22 has an invalid length.
13:49:09 executing program 1:
syz_open_dev$dmmidi(&(0x7f0000000900)='/dev/dmmidi#\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(0x0, 0x0, 0x100082)
r1 = memfd_create(&(0x7f00000004c0)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\\|A\x06F\xe7\xe8,\x06t\x84\x00\x81tT\xfa\x96\xcb\xd1 \xcd\xef)\xf6\xbe\xb5\x13\xce\xabRb\x1c\xd5\xfa\xdc\xe3\xe0\x1c\x04\xad\xc1\xd6\x8d8\x96DB\xf6\x989\xd0\xcf\x98 \x975\n\xda\xb2.\xcb\t<{\x18\xe6lgA\xff\x91\x1fD\xfa\xd4\xd6\x11\xa1\vvA\xb1\xec\xef\x11\x9e\xc9\xff\x11\x98\x9c\x1a\xb7\x03\xa7\xdc\xd1]\x8aV\x8d1\xe6Q\xf9Q.\xb70\x13\x10\x12\x0f\x9e!$#*\xec\x85X\xde\xf2\x9c\x85\xf8\xb9\xf2\xe9\xef!\xc5\x8c\xc5p\x7f\x00+2w\xa3Q\xd9\xec\x03\xa3\xd1\x06\x81\xe6\xd1\x9bo\xd0\xb3\x19XOr\xbfm\f\x9a\x85\\\xe9Ie\xc6\xd3\xa7\xce+\x13N\'', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendfile(r0, r1, 0x0, 0x2000010200000f)

13:49:09 executing program 4:
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r1 = fanotify_init(0x100000104, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r3 = fanotify_init(0x0, 0x0)
fanotify_mark(r3, 0x11, 0x20, r2, 0x0)
fanotify_mark(r1, 0x11, 0x8000020, r0, 0x0)

13:49:09 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
openat$ashmem(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ashmem\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

13:49:09 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x200000000011, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r2, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffd8)

13:49:10 executing program 1:
syz_open_dev$dmmidi(&(0x7f0000000900)='/dev/dmmidi#\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(0x0, 0x0, 0x100082)
r1 = memfd_create(&(0x7f00000004c0)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\\|A\x06F\xe7\xe8,\x06t\x84\x00\x81tT\xfa\x96\xcb\xd1 \xcd\xef)\xf6\xbe\xb5\x13\xce\xabRb\x1c\xd5\xfa\xdc\xe3\xe0\x1c\x04\xad\xc1\xd6\x8d8\x96DB\xf6\x989\xd0\xcf\x98 \x975\n\xda\xb2.\xcb\t<{\x18\xe6lgA\xff\x91\x1fD\xfa\xd4\xd6\x11\xa1\vvA\xb1\xec\xef\x11\x9e\xc9\xff\x11\x98\x9c\x1a\xb7\x03\xa7\xdc\xd1]\x8aV\x8d1\xe6Q\xf9Q.\xb70\x13\x10\x12\x0f\x9e!$#*\xec\x85X\xde\xf2\x9c\x85\xf8\xb9\xf2\xe9\xef!\xc5\x8c\xc5p\x7f\x00+2w\xa3Q\xd9\xec\x03\xa3\xd1\x06\x81\xe6\xd1\x9bo\xd0\xb3\x19XOr\xbfm\f\x9a\x85\\\xe9Ie\xc6\xd3\xa7\xce+\x13N\'', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendfile(r0, r1, 0x0, 0x2000010200000f)

13:49:10 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x2, [@multicast1, @empty]}, 0x18)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'lo\x00@\x00\x00\x00\x00\x00\x05\x00', 0x4001})

13:49:10 executing program 5:
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0)
r0 = request_key(0x0, &(0x7f0000000480)={'syz', 0x0}, 0x0, 0xfffffffffffffffc)
r1 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$instantiate(0xc, r1, 0x0, 0x0, 0xfffffffffffffff8)
r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='stack\x00')
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_sco(r3, 0x0, 0x0)
setsockopt$sock_timeval(r3, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x2710}, 0x3b0)
listen(r3, 0x0)
accept(r3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_sco(r4, &(0x7f0000000040), 0x8)
setsockopt$sock_timeval(r4, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x2710}, 0x3b0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$peekuser(0x3, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0x700, 0x5, 0x50000000000000d, 0x8848000000f0ffff], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x3], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0x11, 0x5}}}}}}}}, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffee6)
setxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x1)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa312, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x168}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000680)='status\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x20)

13:49:10 executing program 0:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48)
socket$inet_sctp(0x2, 0x0, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0)
listen(r0, 0x0)
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
getpeername(r0, 0x0, &(0x7f0000000240))

13:49:10 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r0, 0x29, 0xd0, 0x0, &(0x7f0000000080))

13:49:10 executing program 1:
syz_open_dev$dmmidi(&(0x7f0000000900)='/dev/dmmidi#\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(0x0, 0x0, 0x100082)
r1 = memfd_create(&(0x7f00000004c0)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\\|A\x06F\xe7\xe8,\x06t\x84\x00\x81tT\xfa\x96\xcb\xd1 \xcd\xef)\xf6\xbe\xb5\x13\xce\xabRb\x1c\xd5\xfa\xdc\xe3\xe0\x1c\x04\xad\xc1\xd6\x8d8\x96DB\xf6\x989\xd0\xcf\x98 \x975\n\xda\xb2.\xcb\t<{\x18\xe6lgA\xff\x91\x1fD\xfa\xd4\xd6\x11\xa1\vvA\xb1\xec\xef\x11\x9e\xc9\xff\x11\x98\x9c\x1a\xb7\x03\xa7\xdc\xd1]\x8aV\x8d1\xe6Q\xf9Q.\xb70\x13\x10\x12\x0f\x9e!$#*\xec\x85X\xde\xf2\x9c\x85\xf8\xb9\xf2\xe9\xef!\xc5\x8c\xc5p\x7f\x00+2w\xa3Q\xd9\xec\x03\xa3\xd1\x06\x81\xe6\xd1\x9bo\xd0\xb3\x19XOr\xbfm\f\x9a\x85\\\xe9Ie\xc6\xd3\xa7\xce+\x13N\'', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendfile(r0, r1, 0x0, 0x2000010200000f)

13:49:10 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x80000, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={<r2=>0x0, 0xcea}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={r2, @in6={{0xa, 0x0, 0x5, @mcast2, 0x5}}, [0x0, 0x96f, 0x8000000000000000, 0x1c0000, 0x3ff, 0x0, 0x400, 0x6, 0x2, 0x10001, 0x4fdd, 0x1, 0x6, 0x5, 0x5]}, &(0x7f0000000180)=0x100)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x40)
listen(r0, 0x5)
ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000080))
listen(r0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r3})
sendto$inet(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x41, 0x0, 0x0)
open(0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0)
r4 = socket(0x200000000000011, 0x80000000000003, 0x8)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00'})
sendmmsg(r4, 0x0, 0x0, 0x0)

13:49:10 executing program 3:
syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
ioctl(r0, 0xc1004111, 0x0)

13:49:11 executing program 5:
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0)
r0 = request_key(0x0, &(0x7f0000000480)={'syz', 0x0}, 0x0, 0xfffffffffffffffc)
r1 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$instantiate(0xc, r1, 0x0, 0x0, 0xfffffffffffffff8)
r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='stack\x00')
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_sco(r3, 0x0, 0x0)
setsockopt$sock_timeval(r3, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x2710}, 0x3b0)
listen(r3, 0x0)
accept(r3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_sco(r4, &(0x7f0000000040), 0x8)
setsockopt$sock_timeval(r4, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x2710}, 0x3b0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$peekuser(0x3, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0x700, 0x5, 0x50000000000000d, 0x8848000000f0ffff], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x3], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0x11, 0x5}}}}}}}}, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffee6)
setxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x1)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa312, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x168}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000680)='status\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x20)

13:49:11 executing program 1:
syz_open_dev$dmmidi(&(0x7f0000000900)='/dev/dmmidi#\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(0x0, 0x0, 0x100082)
r1 = memfd_create(&(0x7f00000004c0)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\\|A\x06F\xe7\xe8,\x06t\x84\x00\x81tT\xfa\x96\xcb\xd1 \xcd\xef)\xf6\xbe\xb5\x13\xce\xabRb\x1c\xd5\xfa\xdc\xe3\xe0\x1c\x04\xad\xc1\xd6\x8d8\x96DB\xf6\x989\xd0\xcf\x98 \x975\n\xda\xb2.\xcb\t<{\x18\xe6lgA\xff\x91\x1fD\xfa\xd4\xd6\x11\xa1\vvA\xb1\xec\xef\x11\x9e\xc9\xff\x11\x98\x9c\x1a\xb7\x03\xa7\xdc\xd1]\x8aV\x8d1\xe6Q\xf9Q.\xb70\x13\x10\x12\x0f\x9e!$#*\xec\x85X\xde\xf2\x9c\x85\xf8\xb9\xf2\xe9\xef!\xc5\x8c\xc5p\x7f\x00+2w\xa3Q\xd9\xec\x03\xa3\xd1\x06\x81\xe6\xd1\x9bo\xd0\xb3\x19XOr\xbfm\f\x9a\x85\\\xe9Ie\xc6\xd3\xa7\xce+\x13N\'', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendfile(r0, r1, 0x0, 0x2000010200000f)

13:49:11 executing program 3:
syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
ioctl(r0, 0xc1004111, 0x0)

13:49:11 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x200000000011, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r2, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffd8)

13:49:11 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x80000, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={<r2=>0x0, 0xcea}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={r2, @in6={{0xa, 0x0, 0x5, @mcast2, 0x5}}, [0x0, 0x96f, 0x8000000000000000, 0x1c0000, 0x3ff, 0x0, 0x400, 0x6, 0x2, 0x10001, 0x4fdd, 0x1, 0x6, 0x5, 0x5]}, &(0x7f0000000180)=0x100)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x40)
listen(r0, 0x5)
ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000080))
listen(r0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r3})
sendto$inet(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x41, 0x0, 0x0)
open(0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0)
r4 = socket(0x200000000000011, 0x80000000000003, 0x8)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00'})
sendmmsg(r4, 0x0, 0x0, 0x0)

13:49:11 executing program 5:
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0)
r0 = request_key(0x0, &(0x7f0000000480)={'syz', 0x0}, 0x0, 0xfffffffffffffffc)
r1 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$instantiate(0xc, r1, 0x0, 0x0, 0xfffffffffffffff8)
r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='stack\x00')
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_sco(r3, 0x0, 0x0)
setsockopt$sock_timeval(r3, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x2710}, 0x3b0)
listen(r3, 0x0)
accept(r3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_sco(r4, &(0x7f0000000040), 0x8)
setsockopt$sock_timeval(r4, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x2710}, 0x3b0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$peekuser(0x3, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0x700, 0x5, 0x50000000000000d, 0x8848000000f0ffff], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x3], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0x11, 0x5}}}}}}}}, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffee6)
setxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x1)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa312, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x168}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000680)='status\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x20)

13:49:11 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x80000, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={<r2=>0x0, 0xcea}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={r2, @in6={{0xa, 0x0, 0x5, @mcast2, 0x5}}, [0x0, 0x96f, 0x8000000000000000, 0x1c0000, 0x3ff, 0x0, 0x400, 0x6, 0x2, 0x10001, 0x4fdd, 0x1, 0x6, 0x5, 0x5]}, &(0x7f0000000180)=0x100)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x40)
listen(r0, 0x5)
ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000080))
listen(r0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r3})
sendto$inet(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x41, 0x0, 0x0)
open(0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0)
r4 = socket(0x200000000000011, 0x80000000000003, 0x8)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00'})
sendmmsg(r4, 0x0, 0x0, 0x0)

13:49:11 executing program 0:
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0)
r0 = request_key(0x0, &(0x7f0000000480)={'syz', 0x0}, 0x0, 0xfffffffffffffffc)
r1 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$instantiate(0xc, r1, 0x0, 0x0, 0xfffffffffffffff8)
r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='stack\x00')
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_sco(r3, 0x0, 0x0)
setsockopt$sock_timeval(r3, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x2710}, 0x3b0)
listen(r3, 0x0)
accept(r3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_sco(r4, &(0x7f0000000040), 0x8)
setsockopt$sock_timeval(r4, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x2710}, 0x3b0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$peekuser(0x3, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0x700, 0x5, 0x50000000000000d, 0x8848000000f0ffff], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x3], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0x11, 0x5}}}}}}}}, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffee6)
setxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x1)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa312, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x168}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000680)='status\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x20)

13:49:11 executing program 3:
syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
ioctl(r0, 0xc1004111, 0x0)

13:49:11 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x80000, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={<r2=>0x0, 0xcea}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={r2, @in6={{0xa, 0x0, 0x5, @mcast2, 0x5}}, [0x0, 0x96f, 0x8000000000000000, 0x1c0000, 0x3ff, 0x0, 0x400, 0x6, 0x2, 0x10001, 0x4fdd, 0x1, 0x6, 0x5, 0x5]}, &(0x7f0000000180)=0x100)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x40)
listen(r0, 0x5)
ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000080))
listen(r0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r3})
sendto$inet(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x41, 0x0, 0x0)
open(0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0)
r4 = socket(0x200000000000011, 0x80000000000003, 0x8)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00'})
sendmmsg(r4, 0x0, 0x0, 0x0)

13:49:12 executing program 3:
syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
ioctl(r0, 0xc1004111, 0x0)

13:49:12 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x80000, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={<r2=>0x0, 0xcea}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={r2, @in6={{0xa, 0x0, 0x5, @mcast2, 0x5}}, [0x0, 0x96f, 0x8000000000000000, 0x1c0000, 0x3ff, 0x0, 0x400, 0x6, 0x2, 0x10001, 0x4fdd, 0x1, 0x6, 0x5, 0x5]}, &(0x7f0000000180)=0x100)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x40)
listen(r0, 0x5)
ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000080))
listen(r0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r3})
sendto$inet(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x41, 0x0, 0x0)
open(0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0)
r4 = socket(0x200000000000011, 0x80000000000003, 0x8)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00'})
sendmmsg(r4, 0x0, 0x0, 0x0)

13:49:12 executing program 5:
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0)
r0 = request_key(0x0, &(0x7f0000000480)={'syz', 0x0}, 0x0, 0xfffffffffffffffc)
r1 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$instantiate(0xc, r1, 0x0, 0x0, 0xfffffffffffffff8)
r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='stack\x00')
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_sco(r3, 0x0, 0x0)
setsockopt$sock_timeval(r3, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x2710}, 0x3b0)
listen(r3, 0x0)
accept(r3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_sco(r4, &(0x7f0000000040), 0x8)
setsockopt$sock_timeval(r4, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x2710}, 0x3b0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$peekuser(0x3, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0x700, 0x5, 0x50000000000000d, 0x8848000000f0ffff], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x3], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0x11, 0x5}}}}}}}}, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffee6)
setxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x1)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa312, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x168}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000680)='status\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x20)

13:49:12 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x80000, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={<r2=>0x0, 0xcea}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={r2, @in6={{0xa, 0x0, 0x5, @mcast2, 0x5}}, [0x0, 0x96f, 0x8000000000000000, 0x1c0000, 0x3ff, 0x0, 0x400, 0x6, 0x2, 0x10001, 0x4fdd, 0x1, 0x6, 0x5, 0x5]}, &(0x7f0000000180)=0x100)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x40)
listen(r0, 0x5)
ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000080))
listen(r0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r3})
sendto$inet(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x41, 0x0, 0x0)
open(0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0)
r4 = socket(0x200000000000011, 0x80000000000003, 0x8)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00'})
sendmmsg(r4, 0x0, 0x0, 0x0)

13:49:12 executing program 3:
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0)
r0 = request_key(0x0, &(0x7f0000000480)={'syz', 0x0}, 0x0, 0xfffffffffffffffc)
r1 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$instantiate(0xc, r1, 0x0, 0x0, 0xfffffffffffffff8)
r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='stack\x00')
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_sco(r3, 0x0, 0x0)
setsockopt$sock_timeval(r3, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x2710}, 0x3b0)
listen(r3, 0x0)
accept(r3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_sco(r4, &(0x7f0000000040), 0x8)
setsockopt$sock_timeval(r4, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x2710}, 0x3b0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$peekuser(0x3, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0x700, 0x5, 0x50000000000000d, 0x8848000000f0ffff], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x3], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0x11, 0x5}}}}}}}}, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffee6)
setxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x1)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa312, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x168}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000680)='status\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x20)

13:49:12 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x200000000011, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r2, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffd8)

13:49:12 executing program 0:
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0)
r0 = request_key(0x0, &(0x7f0000000480)={'syz', 0x0}, 0x0, 0xfffffffffffffffc)
r1 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$instantiate(0xc, r1, 0x0, 0x0, 0xfffffffffffffff8)
r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='stack\x00')
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_sco(r3, 0x0, 0x0)
setsockopt$sock_timeval(r3, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x2710}, 0x3b0)
listen(r3, 0x0)
accept(r3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_sco(r4, &(0x7f0000000040), 0x8)
setsockopt$sock_timeval(r4, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x2710}, 0x3b0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$peekuser(0x3, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0x700, 0x5, 0x50000000000000d, 0x8848000000f0ffff], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x3], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0x11, 0x5}}}}}}}}, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffee6)
setxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x1)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa312, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x168}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000680)='status\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x20)

13:49:12 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x80000, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={<r2=>0x0, 0xcea}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={r2, @in6={{0xa, 0x0, 0x5, @mcast2, 0x5}}, [0x0, 0x96f, 0x8000000000000000, 0x1c0000, 0x3ff, 0x0, 0x400, 0x6, 0x2, 0x10001, 0x4fdd, 0x1, 0x6, 0x5, 0x5]}, &(0x7f0000000180)=0x100)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x40)
listen(r0, 0x5)
ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000080))
listen(r0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r3})
sendto$inet(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x41, 0x0, 0x0)
open(0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0)
r4 = socket(0x200000000000011, 0x80000000000003, 0x8)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00'})
sendmmsg(r4, 0x0, 0x0, 0x0)

13:49:12 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_procfs(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unshare(0x2040400)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000340))
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0)
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000580))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'})
ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'})

13:49:13 executing program 5:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write(0xffffffffffffffff, &(0x7f0000000000)="0f42", 0xfffffeab)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000001000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000002c0))
ioctl$KVM_RUN(r5, 0xae80, 0x0)

13:49:13 executing program 3:
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0)
r0 = request_key(0x0, &(0x7f0000000480)={'syz', 0x0}, 0x0, 0xfffffffffffffffc)
r1 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$instantiate(0xc, r1, 0x0, 0x0, 0xfffffffffffffff8)
r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='stack\x00')
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_sco(r3, 0x0, 0x0)
setsockopt$sock_timeval(r3, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x2710}, 0x3b0)
listen(r3, 0x0)
accept(r3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_sco(r4, &(0x7f0000000040), 0x8)
setsockopt$sock_timeval(r4, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x2710}, 0x3b0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$peekuser(0x3, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0x700, 0x5, 0x50000000000000d, 0x8848000000f0ffff], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x3], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0x11, 0x5}}}}}}}}, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffee6)
setxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x1)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa312, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x168}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000680)='status\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x20)

13:49:13 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

[  656.058633][T16969] bond0: (slave bond_slave_1): Releasing backup interface
13:49:13 executing program 0:
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0)
r0 = request_key(0x0, &(0x7f0000000480)={'syz', 0x0}, 0x0, 0xfffffffffffffffc)
r1 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$instantiate(0xc, r1, 0x0, 0x0, 0xfffffffffffffff8)
r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='stack\x00')
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_sco(r3, 0x0, 0x0)
setsockopt$sock_timeval(r3, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x2710}, 0x3b0)
listen(r3, 0x0)
accept(r3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_sco(r4, &(0x7f0000000040), 0x8)
setsockopt$sock_timeval(r4, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x2710}, 0x3b0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$peekuser(0x3, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0x700, 0x5, 0x50000000000000d, 0x8848000000f0ffff], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x3], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0x11, 0x5}}}}}}}}, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffee6)
setxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x1)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa312, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x168}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000680)='status\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x20)

[  656.243482][T16980] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
13:49:13 executing program 3:
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0)
r0 = request_key(0x0, &(0x7f0000000480)={'syz', 0x0}, 0x0, 0xfffffffffffffffc)
r1 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$instantiate(0xc, r1, 0x0, 0x0, 0xfffffffffffffff8)
r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='stack\x00')
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_sco(r3, 0x0, 0x0)
setsockopt$sock_timeval(r3, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x2710}, 0x3b0)
listen(r3, 0x0)
accept(r3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_sco(r4, &(0x7f0000000040), 0x8)
setsockopt$sock_timeval(r4, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x2710}, 0x3b0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$peekuser(0x3, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0x700, 0x5, 0x50000000000000d, 0x8848000000f0ffff], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x3], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0x11, 0x5}}}}}}}}, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffee6)
setxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x1)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa312, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x168}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000680)='status\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x20)

13:49:14 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

13:49:14 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

13:49:14 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x200000000011, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r2, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffd8)

13:49:14 executing program 0:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GSUBSCRIP(r0, 0x8914, &(0x7f0000000100)={'eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\xbb?\x89\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x17\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00S0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_/0\xc4\x00\x00\x00\x00\x00\x00\x00\x80\x18\x00\x03\x00\x00\x00\x00\x00\x00\xf4\xff\xff\xff\x00\xee\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\xe2\x00'})

[  658.009902][T17013] device eth0 entered promiscuous mode
13:49:15 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_procfs(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unshare(0x2040400)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000340))
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0)
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000580))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'})
ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'})

13:49:15 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

13:49:15 executing program 0:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GSUBSCRIP(r0, 0x8914, &(0x7f0000000100)={'eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\xbb?\x89\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x17\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00S0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_/0\xc4\x00\x00\x00\x00\x00\x00\x00\x80\x18\x00\x03\x00\x00\x00\x00\x00\x00\xf4\xff\xff\xff\x00\xee\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\xe2\x00'})

13:49:15 executing program 3:
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xf)

[  658.352794][T17017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
13:49:15 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

13:49:15 executing program 0:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GSUBSCRIP(r0, 0x8914, &(0x7f0000000100)={'eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\xbb?\x89\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x17\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00S0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_/0\xc4\x00\x00\x00\x00\x00\x00\x00\x80\x18\x00\x03\x00\x00\x00\x00\x00\x00\xf4\xff\xff\xff\x00\xee\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\xe2\x00'})

13:49:15 executing program 3:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10)
listen(r2, 0x0)
accept4$vsock_stream(r2, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r3 = gettid()
tkill(r3, 0x15)

13:49:15 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_procfs(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unshare(0x2040400)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000340))
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0)
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000580))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'})
ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'})

13:49:16 executing program 0:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GSUBSCRIP(r0, 0x8914, &(0x7f0000000100)={'eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\xbb?\x89\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x17\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00S0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_/0\xc4\x00\x00\x00\x00\x00\x00\x00\x80\x18\x00\x03\x00\x00\x00\x00\x00\x00\xf4\xff\xff\xff\x00\xee\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\xe2\x00'})

13:49:16 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

[  659.405931][T17047] bond0: (slave bond_slave_1): Releasing backup interface
13:49:16 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

13:49:17 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x200)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "b299b3e4468a9208", "b8d5e8382b7cb1d02b30a05c6ef0b81f0920126148d3f0d32c95b2b7a139c441", 'dCe#', "b1034b903a64f865"}, 0x38)
sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6)

13:49:17 executing program 3:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10)
listen(r2, 0x0)
accept4$vsock_stream(r2, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r3 = gettid()
tkill(r3, 0x15)

13:49:17 executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10)
listen(r2, 0x0)
accept4$vsock_stream(r2, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r3 = gettid()
tkill(r3, 0x15)

13:49:17 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_procfs(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unshare(0x2040400)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000340))
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0)
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000580))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'})
ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'})

13:49:17 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x200)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "b299b3e4468a9208", "b8d5e8382b7cb1d02b30a05c6ef0b81f0920126148d3f0d32c95b2b7a139c441", 'dCe#', "b1034b903a64f865"}, 0x38)
sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6)

13:49:17 executing program 1:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10)
listen(r2, 0x0)
accept4$vsock_stream(r2, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r3 = gettid()
tkill(r3, 0x15)

[  660.659459][T17078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
13:49:17 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x200)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "b299b3e4468a9208", "b8d5e8382b7cb1d02b30a05c6ef0b81f0920126148d3f0d32c95b2b7a139c441", 'dCe#', "b1034b903a64f865"}, 0x38)
sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6)

13:49:18 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001e00010000004000000000000500000008000000", @ANYRES32=0x0], 0x1c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

13:49:18 executing program 5:
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x0)

13:49:18 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x200)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "b299b3e4468a9208", "b8d5e8382b7cb1d02b30a05c6ef0b81f0920126148d3f0d32c95b2b7a139c441", 'dCe#', "b1034b903a64f865"}, 0x38)
sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6)

13:49:18 executing program 4:
syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x0, 0x2)
openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000600)={'syz\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1b\x00', {0x0, 0x1, 0x0, 0x8f60}, 0x0, [0x1, 0x0, 0x0, 0x5a, 0x3, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x3ff, 0x0, 0x0, 0x3, 0x9, 0x2, 0x2, 0x3, 0x0, 0x0, 0x6, 0x0, 0x5, 0x3f, 0x20, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0xb15, 0xfffffffffffffffe, 0x0, 0xae8, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x7, 0x1000, 0x200000, 0x0, 0x5, 0xfffffffffffffff8, 0x9, 0x0, 0x2], [0x0, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x0, 0xbe, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x0, 0x100, 0x1, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x6, 0x0, 0x7fff, 0x0, 0x80000000, 0x2, 0x7fff, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x6, 0x0, 0x9, 0x43, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3ae9, 0x0, 0x0, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0], [0x4, 0x1f, 0xfff, 0x0, 0x5a, 0x0, 0x0, 0x200, 0x0, 0x0, 0x4, 0x0, 0xc5, 0x7f, 0x0, 0x0, 0xfffffffffffffff9, 0x6, 0x0, 0xff, 0x0, 0x400, 0x0, 0x7, 0x4, 0x8, 0x0, 0x0, 0xffff, 0x8, 0x4, 0x0, 0x80000000, 0x6, 0x20, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x80000001, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x1, 0x9, 0x800, 0x2, 0x7, 0x2, 0x7], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xffff, 0x3ff, 0x401, 0xe16, 0x2, 0x0, 0x2, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x0, 0x0, 0x3, 0x0, 0x9, 0x3ff, 0x2, 0x0, 0x2, 0x2, 0x9, 0x8, 0x0, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100]}, 0x45c)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x24)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)

13:49:18 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x2}}, 0x18}}, 0x0)

13:49:18 executing program 5:
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000400)='ramfs\x00\x9b\x95\x84\x10D\xfb\x9b\x81R#\x10O\xd3\xb4\xe8\xa3\x1f\x00\r\xf6\xd9\xbbt\x95f\x9e\x02\x06\xf946\\{(\xc8\xa7s\xd2>\x81\x88l\x0e\xc5%\x99\x00\x02\x9d\x85\xfc\xa9\\\x99<zMw\a\x02:\x8d\x03\x15S\xf8\xdd\xa1\xa5\x02\xb2DTBG0mk\xe5gE\x9bIL\xdc}\x13\xf8\x8f\x15S\x92\x9b\xda\\J\xf2\xc1-\xe9\x92\x12\xa8\x81\x06\xa9\x9b2-\xc5)\xe9v\x92\xd54\x9fg\xff\xc2\xb5VL\x85\xd5j\xaf^)]\xe0m\x95\xf8\xea\x9a:\xaf\xae\x0f\x84Zo\xc0\x11!\x9f\xe0[\x8d\xb9\x1f\x95t\xe9F>:\xe4\x9c\xf9z>w\xe7\xa9\xa8=\xe9o\x9f\xfbKE\xd7\x9a\x1b\xf8\x86@\x8e\xe6\x9em\x89\xab\x19\xea1\x8e\xa1\xb5\xd7\xc6\xc62\x05\xc7\xe5\xd2m\xeczV\x1d\x84\xcd\xc0\xdf', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./file0\x00')
symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00')
umount2(&(0x7f0000000040)='../file0\x00', 0x2)
mount(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x3119023, 0x0)

13:49:18 executing program 3:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10)
listen(r2, 0x0)
accept4$vsock_stream(r2, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r3 = gettid()
tkill(r3, 0x15)

13:49:18 executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10)
listen(r2, 0x0)
accept4$vsock_stream(r2, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r3 = gettid()
tkill(r3, 0x15)

13:49:18 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001480)={0x20, r3, 0x20b, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x4}]}]}, 0x20}}, 0x0)

13:49:18 executing program 5:
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000400)='ramfs\x00\x9b\x95\x84\x10D\xfb\x9b\x81R#\x10O\xd3\xb4\xe8\xa3\x1f\x00\r\xf6\xd9\xbbt\x95f\x9e\x02\x06\xf946\\{(\xc8\xa7s\xd2>\x81\x88l\x0e\xc5%\x99\x00\x02\x9d\x85\xfc\xa9\\\x99<zMw\a\x02:\x8d\x03\x15S\xf8\xdd\xa1\xa5\x02\xb2DTBG0mk\xe5gE\x9bIL\xdc}\x13\xf8\x8f\x15S\x92\x9b\xda\\J\xf2\xc1-\xe9\x92\x12\xa8\x81\x06\xa9\x9b2-\xc5)\xe9v\x92\xd54\x9fg\xff\xc2\xb5VL\x85\xd5j\xaf^)]\xe0m\x95\xf8\xea\x9a:\xaf\xae\x0f\x84Zo\xc0\x11!\x9f\xe0[\x8d\xb9\x1f\x95t\xe9F>:\xe4\x9c\xf9z>w\xe7\xa9\xa8=\xe9o\x9f\xfbKE\xd7\x9a\x1b\xf8\x86@\x8e\xe6\x9em\x89\xab\x19\xea1\x8e\xa1\xb5\xd7\xc6\xc62\x05\xc7\xe5\xd2m\xeczV\x1d\x84\xcd\xc0\xdf', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./file0\x00')
symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00')
umount2(&(0x7f0000000040)='../file0\x00', 0x2)
mount(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x3119023, 0x0)

13:49:18 executing program 1:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10)
listen(r2, 0x0)
accept4$vsock_stream(r2, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r3 = gettid()
tkill(r3, 0x15)

[  661.609857][T17118] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
13:49:18 executing program 2:
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001000090468fe07f02a0000000100ff0704000000450001070300001419001a00120002000b000100030025000000", 0x32}], 0x1)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x64734a2e, 0x20000)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000}}]}})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00'/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', r6})
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340))
r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0)
r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000}}]}})
ioctl$RTC_UIE_OFF(r8, 0x7004)
write$UHID_CREATE2(r7, &(0x7f0000000d80)={0xb, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0x1000, 0x3, 0x9, 0x6, 0x7, 0x7, "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"}, 0x1118)
mprotect(&(0x7f0000ff0000/0xd000)=nil, 0xd000, 0xc)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000040), &(0x7f00000001c0)=0xc)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000bc0), 0x9)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c)
lstat(0x0, &(0x7f0000002980))
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000400)={0x7, &(0x7f0000000380)=[{0x3, 0x5, 0x9, 0x9}, {0xffffffffffffff7f, 0x0, 0x8000, 0x2}, {0x0, 0x55, 0x5, 0x4b58}, {0x0, 0x7}, {0x0, 0x0, 0x10000}, {0x0, 0xffff, 0x4, 0x2}, {0x55d5, 0x6, 0x1, 0x8}]}, 0x10)
openat$ashmem(0xffffffffffffff9c, 0x0, 0xe3f1b74c991c0272, 0x0)

13:49:18 executing program 4:
syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x0, 0x2)
openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000600)={'syz\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1b\x00', {0x0, 0x1, 0x0, 0x8f60}, 0x0, [0x1, 0x0, 0x0, 0x5a, 0x3, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x3ff, 0x0, 0x0, 0x3, 0x9, 0x2, 0x2, 0x3, 0x0, 0x0, 0x6, 0x0, 0x5, 0x3f, 0x20, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0xb15, 0xfffffffffffffffe, 0x0, 0xae8, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x7, 0x1000, 0x200000, 0x0, 0x5, 0xfffffffffffffff8, 0x9, 0x0, 0x2], [0x0, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x0, 0xbe, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x0, 0x100, 0x1, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x6, 0x0, 0x7fff, 0x0, 0x80000000, 0x2, 0x7fff, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x6, 0x0, 0x9, 0x43, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3ae9, 0x0, 0x0, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0], [0x4, 0x1f, 0xfff, 0x0, 0x5a, 0x0, 0x0, 0x200, 0x0, 0x0, 0x4, 0x0, 0xc5, 0x7f, 0x0, 0x0, 0xfffffffffffffff9, 0x6, 0x0, 0xff, 0x0, 0x400, 0x0, 0x7, 0x4, 0x8, 0x0, 0x0, 0xffff, 0x8, 0x4, 0x0, 0x80000000, 0x6, 0x20, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x80000001, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x1, 0x9, 0x800, 0x2, 0x7, 0x2, 0x7], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xffff, 0x3ff, 0x401, 0xe16, 0x2, 0x0, 0x2, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x0, 0x0, 0x3, 0x0, 0x9, 0x3ff, 0x2, 0x0, 0x2, 0x2, 0x9, 0x8, 0x0, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100]}, 0x45c)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x24)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)

13:49:18 executing program 5:
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000400)='ramfs\x00\x9b\x95\x84\x10D\xfb\x9b\x81R#\x10O\xd3\xb4\xe8\xa3\x1f\x00\r\xf6\xd9\xbbt\x95f\x9e\x02\x06\xf946\\{(\xc8\xa7s\xd2>\x81\x88l\x0e\xc5%\x99\x00\x02\x9d\x85\xfc\xa9\\\x99<zMw\a\x02:\x8d\x03\x15S\xf8\xdd\xa1\xa5\x02\xb2DTBG0mk\xe5gE\x9bIL\xdc}\x13\xf8\x8f\x15S\x92\x9b\xda\\J\xf2\xc1-\xe9\x92\x12\xa8\x81\x06\xa9\x9b2-\xc5)\xe9v\x92\xd54\x9fg\xff\xc2\xb5VL\x85\xd5j\xaf^)]\xe0m\x95\xf8\xea\x9a:\xaf\xae\x0f\x84Zo\xc0\x11!\x9f\xe0[\x8d\xb9\x1f\x95t\xe9F>:\xe4\x9c\xf9z>w\xe7\xa9\xa8=\xe9o\x9f\xfbKE\xd7\x9a\x1b\xf8\x86@\x8e\xe6\x9em\x89\xab\x19\xea1\x8e\xa1\xb5\xd7\xc6\xc62\x05\xc7\xe5\xd2m\xeczV\x1d\x84\xcd\xc0\xdf', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./file0\x00')
symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00')
umount2(&(0x7f0000000040)='../file0\x00', 0x2)
mount(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x3119023, 0x0)

13:49:19 executing program 2:
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001000090468fe07f02a0000000100ff0704000000450001070300001419001a00120002000b000100030025000000", 0x32}], 0x1)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x64734a2e, 0x20000)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000}}]}})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00'/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', r6})
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340))
r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0)
r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000}}]}})
ioctl$RTC_UIE_OFF(r8, 0x7004)
write$UHID_CREATE2(r7, &(0x7f0000000d80)={0xb, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0x1000, 0x3, 0x9, 0x6, 0x7, 0x7, "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"}, 0x1118)
mprotect(&(0x7f0000ff0000/0xd000)=nil, 0xd000, 0xc)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000040), &(0x7f00000001c0)=0xc)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000bc0), 0x9)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c)
lstat(0x0, &(0x7f0000002980))
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000400)={0x7, &(0x7f0000000380)=[{0x3, 0x5, 0x9, 0x9}, {0xffffffffffffff7f, 0x0, 0x8000, 0x2}, {0x0, 0x55, 0x5, 0x4b58}, {0x0, 0x7}, {0x0, 0x0, 0x10000}, {0x0, 0xffff, 0x4, 0x2}, {0x55d5, 0x6, 0x1, 0x8}]}, 0x10)
openat$ashmem(0xffffffffffffff9c, 0x0, 0xe3f1b74c991c0272, 0x0)

13:49:19 executing program 5:
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000400)='ramfs\x00\x9b\x95\x84\x10D\xfb\x9b\x81R#\x10O\xd3\xb4\xe8\xa3\x1f\x00\r\xf6\xd9\xbbt\x95f\x9e\x02\x06\xf946\\{(\xc8\xa7s\xd2>\x81\x88l\x0e\xc5%\x99\x00\x02\x9d\x85\xfc\xa9\\\x99<zMw\a\x02:\x8d\x03\x15S\xf8\xdd\xa1\xa5\x02\xb2DTBG0mk\xe5gE\x9bIL\xdc}\x13\xf8\x8f\x15S\x92\x9b\xda\\J\xf2\xc1-\xe9\x92\x12\xa8\x81\x06\xa9\x9b2-\xc5)\xe9v\x92\xd54\x9fg\xff\xc2\xb5VL\x85\xd5j\xaf^)]\xe0m\x95\xf8\xea\x9a:\xaf\xae\x0f\x84Zo\xc0\x11!\x9f\xe0[\x8d\xb9\x1f\x95t\xe9F>:\xe4\x9c\xf9z>w\xe7\xa9\xa8=\xe9o\x9f\xfbKE\xd7\x9a\x1b\xf8\x86@\x8e\xe6\x9em\x89\xab\x19\xea1\x8e\xa1\xb5\xd7\xc6\xc62\x05\xc7\xe5\xd2m\xeczV\x1d\x84\xcd\xc0\xdf', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./file0\x00')
symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00')
umount2(&(0x7f0000000040)='../file0\x00', 0x2)
mount(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x3119023, 0x0)

13:49:19 executing program 4:
syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x0, 0x2)
openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000600)={'syz\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1b\x00', {0x0, 0x1, 0x0, 0x8f60}, 0x0, [0x1, 0x0, 0x0, 0x5a, 0x3, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x3ff, 0x0, 0x0, 0x3, 0x9, 0x2, 0x2, 0x3, 0x0, 0x0, 0x6, 0x0, 0x5, 0x3f, 0x20, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0xb15, 0xfffffffffffffffe, 0x0, 0xae8, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x7, 0x1000, 0x200000, 0x0, 0x5, 0xfffffffffffffff8, 0x9, 0x0, 0x2], [0x0, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x0, 0xbe, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x0, 0x100, 0x1, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x6, 0x0, 0x7fff, 0x0, 0x80000000, 0x2, 0x7fff, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x6, 0x0, 0x9, 0x43, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3ae9, 0x0, 0x0, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0], [0x4, 0x1f, 0xfff, 0x0, 0x5a, 0x0, 0x0, 0x200, 0x0, 0x0, 0x4, 0x0, 0xc5, 0x7f, 0x0, 0x0, 0xfffffffffffffff9, 0x6, 0x0, 0xff, 0x0, 0x400, 0x0, 0x7, 0x4, 0x8, 0x0, 0x0, 0xffff, 0x8, 0x4, 0x0, 0x80000000, 0x6, 0x20, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x80000001, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x1, 0x9, 0x800, 0x2, 0x7, 0x2, 0x7], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xffff, 0x3ff, 0x401, 0xe16, 0x2, 0x0, 0x2, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x0, 0x0, 0x3, 0x0, 0x9, 0x3ff, 0x2, 0x0, 0x2, 0x2, 0x9, 0x8, 0x0, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100]}, 0x45c)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x24)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)

13:49:19 executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10)
listen(r2, 0x0)
accept4$vsock_stream(r2, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r3 = gettid()
tkill(r3, 0x15)

13:49:19 executing program 3:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10)
listen(r2, 0x0)
accept4$vsock_stream(r2, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r3 = gettid()
tkill(r3, 0x15)

13:49:19 executing program 5:
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001000090468fe07f02a0000000100ff0704000000450001070300001419001a00120002000b000100030025000000", 0x32}], 0x1)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x64734a2e, 0x20000)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000}}]}})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00'/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', r6})
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340))
r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0)
r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000}}]}})
ioctl$RTC_UIE_OFF(r8, 0x7004)
write$UHID_CREATE2(r7, &(0x7f0000000d80)={0xb, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0x1000, 0x3, 0x9, 0x6, 0x7, 0x7, "0963d80bd45eab1de4f64a9d8eaff772b8a231fa41d362f88e89133ca895ad976a2dfc3058f82e697dcc74594c8a6ae78cdc8c7619f9de608c44251ee35ac9c7ca2cf58a33fd2c5943af1934fa037a6e72dea6ab3f7903ab7d427fab13e5f79d264679d2edf5d69ca2837bd641f5c3dce2528a62dd6326f4967927156dfc96d0c5073aa2c6f61fc28c13ba0ffcdfc54967cf48e5a9dbb8d627356cabbd42db20131728c017b13eeded929fe9eaf951fa5afded908c63d60eaa0e41e7aa6b9897126e3b1dcad4e68d61006b5677b632b762bd444ac417ed0b9bbc8659d4a7a617d642eefa4dc90c11805127053d598826cb373ec7990306a257ebf0ac20e819445e518b2a390db27beda6451758bee2b2ad3845145be530bec8846cd6a94eb459f7ad7bc962805cc4c1c23617ec266fc3d622fbf8f5583ef23701e267261d836bb8328e35fdc3b2288ad4d5b19030f96054d6f3697e386b534ac53f9ac37c68e39401d5c2307f48357ee7c9d56fb86235f06bb95fbb504c42e076c6ef5b703cbc58c5439249fad036b55cc44816504a989bc54264d8de838ae8f1936b113151803b58314467d5a64f4478e3ffead40e4e67a84f240300dbdec676f5106a8831a3f3889100423c88af9aa502a1006ec50203f7cbcc183f6c4e9ad0e6dbd3e3e0bf90ce2a15f9050d2c16485e762ef6c3cb18053382afd7e63774912554b68c79b514ff4fcb8a68de38d45c54be82ac49d4f5bd0a839b9eec4531d3311caeb4e990a3f997ec9d090fd6ec79986f6bb3139b0b3d4002be0561ecb4b90c212eb63d85bd5698cd53fa819af7735690aa3138d049ba372bfd67c3187bfb81973e234c03c32ce2c8c829554f499563ce4abbee2085c5fb17959377d7bf9124716b1c4fcc63ed9c1158eab9ca0e55d0137ac657c998e53c5c8c275b5d7ada7aa7a2e01814c5904f75620537c73a02268d6e8ca0c35fe10470be6b812391c424f7e5e1723595e07b3d19da9c7e61414d36062d6414f67eeb6e6368301f28c1bb6f9e973e8b093e9992c23802f86155e0e2bb982c488ed9b4d4f0b1dc356282f31bb90917d7e340c64a34edc4d3c9147b0f4d0786d4b3028fdc2e607788471544ff291a445c4330dbd557822c4d459c29a8d3e16b4c4de8445b038b14ab9373d26c1612cbeaddf9378eccca16e13ddbbf497bb7dd08bcfb1e32d05a9cd886e81f7779c3769721d4e47038b0e2b0bec012da5521d5fa3b08403dadf8e81ed4b66c0c1cff14e5ce008e5d98f1573999f5a81097dbdf26ef5fe5916a97dcf1cbf1bdf631fd3110fb271a391f3f50e631508c0bd89c406debb8facdaecd58828c7a9cea09d76f34c535a435ef07a1ff0a5b9993af471762a14e40368d661c7cf52831a9a742e9bdd939103469349fe67ced09d1c0e82fd9504ba2727046c3eaeaf5c0f2130c1968a0c01d1baa960120ad4681ddf0c8577e7f3265c94a10cb8b49be24e5977fab7a5c4402d118b70f112e49b7446def1c48530efdf414c4d1c71e2b78fd8cb3a1fb1b78fd3e6111b72af3f1ea0163dadde3f0107ce766b2018b73623076d6f46cf1070cc6a89aaf927135daa6a223c2986c552b58800f24f51383f0ddc18e3fb179f4d2f4de47bdced4976d25d7c0309a20220f034d63f9de0cf3a516d7c7d5609c7c872c388beb31d4642282672869cd7bcb335218a0e257cbe1b3e7cb2e249f039acd81c2f7041da217ef49e7a5f8f8f4f9c14d39c867de60912ecc05b0fe147b4f3d60982047302ad2c53bab6ffe0b82a315959d5cc59119c1f694acb1d9fdf46aa0c10478a80dfeed11832f7eb4d0794aa530dc872bba92e4d23d67bf62fdec5ffa6f7ea3e68e2dcd97f52b12fc93a1f848b3663a48d638d3eab955dcac7a2686eda0c02c17bc321cff0e3395b8fc2fd4cf4ceef03d461aade70da30a7ab1c024b65ab0d42a85ca9fee717d7d5cc91ff397e9f5081238da867adad0bc671fdb9c3000af033c723ab0ad98b1a2f98cfe61382ef8695b6862486ad93ce98b1b77195a9ecf177adb1be7b2ef928ea4de1d979bb9fd9328c3b7bd8499fb2a9e00ef50afa38ac88393168cf48d3cec041edb0cda0b2fbadf22f25883fc66e6badec7f5881ee52b20a077553a3f64e08f2503da34cfca2ffd38fc1b8fbc6ca8a10f07a9be4eb4dcacabc36a4d026d48f246e9ad646e70d2d02a9a7989fb8c06eee896aeeeda1fe3282bc5ee7e66ecaed7c49f3b9f30fde4bf638355fe409c6dfcba6cda097c1d9bd92e5325ddbc7a3e0b86ca7228601007ef02a728ddf12240af219cf0f2ebf685f15df4602ec5fd6b62f930f38980a5c0a0b6cf88c4d409fd28d72563f66901ac182367233ebe47bfd9b073e99a241573d403916628ab256443f5a7775f778f0920865c54326b3d16c76f0b889541048218064f7d1829c587fb96e62a5e4354ad259af9926426bdbec30a551aa830b3aebd9617066ab51c7c9d7d12ad00b952ec89b4b95f7e5bbc9780da01d6f9d582df0a2c941c6c120739402ca28a076d5bb561d29c1f9df6e5d5751cda3afbd6ef9734788c7751193092e8f5e0b62e276574f073428ac271a085fee3e257fb28a386c189bcf4ba8316ebc25314dc9b38514415ea354990a9af9b797e5e816fa6d9e22cf3ef49ba8a6e533bfff06b342dd8b915eeefb9ab0c70d611286b4220ce73213f8441c69d968560694f592b6307238c4fcd83667eefe60690cacf6d175da3498350f751dd939bf4390036608a5b512c30072090745c41de6173c977c34d67cc4f3b334361d576b7c78893c1e346162f07e3a53def95a622501a8a7d13534c66e50020736c34e324dd9ea7851b5833f021f846c59f1b5815089cde4bdcf822ae55ecfc2339ba4548b2f8f35b75c9edfcba2514470cffa0ac175ec43d4405008379198f21b8992183d6646c8add869f722a4a0581048e0535b1c301bbc25de14497e2cbc68629575a63c5d86a76e154c42739dff7331f63a610c62e48ab65684e7c1206c405fd5150ab80271cd02483858df05d3d4c28d3609924ac55d9a400a9e3af6779b438135ebea8d6591d3fb29c4d0572c02d8a445c24088bf95b60ece3efd22281a61a5de2c0fca4d8ea34f87d78d675d50d57d1a67a04725fc19b63412ed82ffd82979cf0fffd63bc62b9d25929449b62095f41d9b1f87b1c418806b6e5d76b6a11f993cff9757e80e61400648a4c245f32b4f4bdd5508742aa30cb07f3b25e6f70c4809c0ab0133dc26b024335b1402e8f76d10cb7bd80899d794b06020aa32c70d1869c42fd88228199b2261d72abf3477558e48e2b7f15ba91355c0942506f36200ba2b2c4710274154a6bf850424a2243c0d834649cd240f8c05ef0bb554c093a59a4d2b25035b5061aca201931a3bbead2c76d85ba23f3c0bbb7fe1a67af567dbabb5579dbdb7c3e19f01c263929ea55bd1142a1ffd281c0c674250af92d43447507af39e52631ada502ce241cb32b55b6d7601f7e137fc31725716720305f7baa0da56a6fa68d9954782f1d91da0af36dae186a40838bd5db12dd6b0b39f88ebfaa290a23df2465145584693de95af8ff2399c9e395de8a5e83b5829e01f2cda82dbd0bb1119efb5dfc0e1442d3cbb1a2e10fd427d68b2a37527e69f5a204052e99954a7f64cfb3a953e9a84893c216f4d6b6cc7b9c76cd0097263ee618282a9a358235b19b6dee8156555007f08b8f36133f910f4dfa96c39f57f5747b04678b73d128c0119b2df47b830502614baae7710297ef953ab68a93e3b03ae93ddc6ea82cd90f98aa9233e601039c6c3e5bb26b7f57359e395e83b0d2e8edc05342b021d71b0b75b3d584edad04012c4ca6ea85cdde81908c9afb2214d4e921b07da66157883b4f370249a515cfa56c5832db443252bf484b8d433827969646121d512c56efc45dc33d7228174f2b38c33debe4b2b4037f4010490428a7eae404b7dac0203ea1cecad608d65a2b57ab59c3732232306a72ac013c8cd53e12c56a68a1a1df739089905d83619619cbfe0145dedf911067c1ecd66a8e2a55125a8c55e6ed4b344d61b177328be44a9d19cc1ce86f860a785bcb38f57508b3c077b40c2b41c352cfd2b8fdd9f951982303f2d674433051b25d8be734f78527317233d146296f8bb9702feddca8068fa3825f95c1fcd4acefca2adfef3d295273d28d4afe642ff059a9b383c97c0015320f04131ae58673ed4c6d733475a903500a67a54bbd381e133797a6641c3c4578a40c834513e612ac2e0ff3b947bf7d7ffbe912ee31be0e2e3c87647d5f5e61c0819cd02f94cd55c1461d89b19732107d6f7c38449b1d97db352ce5121729445a163aba8e3bdf9f512191e1fb793e7a5bb62704d1198da2d6f80c00796ca967181db8d716ba0c20f71b5f6c7060cda152c48dc1f008eab5f08b26012ceef7683e6d528c7980b62fca2cec0ffae80d824b90e6754aa57b381c16572935048a4b868b2957ee3a15ea295afcf04f5762463a2709206f098db0b58111343a1d9fcdbbf48927a7fcf6ea28303e2f8402e7eda7ccadfacb433285475cb8ac35448d3042fe62c35d3ef63f3e543f77232171759037778f86eb0d4685897a62efb87aab649bb54e174e5428b34eed223a48cc772fb5817b2c72edf6aa56c043dabb4b5be9bd579c7e6d89f3ac679a0a1450484c2213c34cf106afd9cb751ca2775e9b343dc91667be11799f2867cf280827eb12660b93e01ce6c41bee8923db861148e3e7b4e90348036c4deb22854f38a10240ae2b3a0a046da9d17dba59d19487b0f9da150178a6a2bcee35309c70055495e24c43242d4d99be58fd9502f4e55413652ea5545a987cd5e6abc81894b50a429c10f1f4caf8cdaea674b9b88051e6712d453c6de800011af571a2587bc36572b227474a7015f331444cd9a771bb684d850674e8956a524eabe11395ae213ef74da8f60a8d042190c512f751197074b99479830debd2b73dc0a41071ae5a74dfac1e986dfb7886da0e99e33bc9cb41d770f98f4a4278001edcc1d535af80030dbe2e76085601ad5ee29c5feb648615657a5b2627dd32787a9c2539e950182062ec3ea56f6124f62f8cd6c00e3444446c63b7738ed8f403f87149fe7ddd23468ec7dfd1c7d73507129a89728603af9703c2c14afb6a9ed1c36b179b440b69c7982d68564e4513c43a97236116af882e99f0f886feb3682d38107a8f77fe6d24cf6f1c55a92574251facdeb7c991005f715bb9c8c90a8505eea5c2d42628e11f88c4f2d2fd5df0ebb60a8098a48469bbcdb11f7ad4c3f1cc22fc7038e8a259c9eb9915ecea323be58a6ac1383ccab3ac8a7ed9d14df9c81a0cba200fe7a171d2baf4bc82a37df46068f342b545abcbfa429aa1a8c014f86f70023ed813c0ccb22e7f3ca7891686aa85663879816bf30e334fbc90396594f7ed9c37dcd70e85f78af6b2d2b6adc93fbfff26a09cd80892ccc788f3f487b0781ee3dbc4e3497c10bb9c1938eeba4be2f9a3c70a4157986ea27785376d4544befabe02237d9a53f8e326d68597ed714daa8ee0333ebc6a05fbd6f77ebd0c578d6363fef3891ed67441fffb8c671a992d48279a9d6afd0fb507b6230559f129e1720ace6307023302a02086f4d3cd782fd76b601ba6bab0911862d9f34ba400acd9ec3a1c08a9d9ff9d19f444a7215daf252092732ccef76d2e193e6a4782af11cb3633daccf2d5f5489b70cd9c46c776c08174d88f3988e20000302a6aa47f0e55d9969a3008113eac6ae2eb18d6082ab3bddb"}, 0x1118)
mprotect(&(0x7f0000ff0000/0xd000)=nil, 0xd000, 0xc)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000040), &(0x7f00000001c0)=0xc)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000bc0), 0x9)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c)
lstat(0x0, &(0x7f0000002980))
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000400)={0x7, &(0x7f0000000380)=[{0x3, 0x5, 0x9, 0x9}, {0xffffffffffffff7f, 0x0, 0x8000, 0x2}, {0x0, 0x55, 0x5, 0x4b58}, {0x0, 0x7}, {0x0, 0x0, 0x10000}, {0x0, 0xffff, 0x4, 0x2}, {0x55d5, 0x6, 0x1, 0x8}]}, 0x10)
openat$ashmem(0xffffffffffffff9c, 0x0, 0xe3f1b74c991c0272, 0x0)

13:49:19 executing program 2:
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001000090468fe07f02a0000000100ff0704000000450001070300001419001a00120002000b000100030025000000", 0x32}], 0x1)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x64734a2e, 0x20000)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000}}]}})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00'/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', r6})
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340))
r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0)
r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000}}]}})
ioctl$RTC_UIE_OFF(r8, 0x7004)
write$UHID_CREATE2(r7, &(0x7f0000000d80)={0xb, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0x1000, 0x3, 0x9, 0x6, 0x7, 0x7, "0963d80bd45eab1de4f64a9d8eaff772b8a231fa41d362f88e89133ca895ad976a2dfc3058f82e697dcc74594c8a6ae78cdc8c7619f9de608c44251ee35ac9c7ca2cf58a33fd2c5943af1934fa037a6e72dea6ab3f7903ab7d427fab13e5f79d264679d2edf5d69ca2837bd641f5c3dce2528a62dd6326f4967927156dfc96d0c5073aa2c6f61fc28c13ba0ffcdfc54967cf48e5a9dbb8d627356cabbd42db20131728c017b13eeded929fe9eaf951fa5afded908c63d60eaa0e41e7aa6b9897126e3b1dcad4e68d61006b5677b632b762bd444ac417ed0b9bbc8659d4a7a617d642eefa4dc90c11805127053d598826cb373ec7990306a257ebf0ac20e819445e518b2a390db27beda6451758bee2b2ad3845145be530bec8846cd6a94eb459f7ad7bc962805cc4c1c23617ec266fc3d622fbf8f5583ef23701e267261d836bb8328e35fdc3b2288ad4d5b19030f96054d6f3697e386b534ac53f9ac37c68e39401d5c2307f48357ee7c9d56fb86235f06bb95fbb504c42e076c6ef5b703cbc58c5439249fad036b55cc44816504a989bc54264d8de838ae8f1936b113151803b58314467d5a64f4478e3ffead40e4e67a84f240300dbdec676f5106a8831a3f3889100423c88af9aa502a1006ec50203f7cbcc183f6c4e9ad0e6dbd3e3e0bf90ce2a15f9050d2c16485e762ef6c3cb18053382afd7e63774912554b68c79b514ff4fcb8a68de38d45c54be82ac49d4f5bd0a839b9eec4531d3311caeb4e990a3f997ec9d090fd6ec79986f6bb3139b0b3d4002be0561ecb4b90c212eb63d85bd5698cd53fa819af7735690aa3138d049ba372bfd67c3187bfb81973e234c03c32ce2c8c829554f499563ce4abbee2085c5fb17959377d7bf9124716b1c4fcc63ed9c1158eab9ca0e55d0137ac657c998e53c5c8c275b5d7ada7aa7a2e01814c5904f75620537c73a02268d6e8ca0c35fe10470be6b812391c424f7e5e1723595e07b3d19da9c7e61414d36062d6414f67eeb6e6368301f28c1bb6f9e973e8b093e9992c23802f86155e0e2bb982c488ed9b4d4f0b1dc356282f31bb90917d7e340c64a34edc4d3c9147b0f4d0786d4b3028fdc2e607788471544ff291a445c4330dbd557822c4d459c29a8d3e16b4c4de8445b038b14ab9373d26c1612cbeaddf9378eccca16e13ddbbf497bb7dd08bcfb1e32d05a9cd886e81f7779c3769721d4e47038b0e2b0bec012da5521d5fa3b08403dadf8e81ed4b66c0c1cff14e5ce008e5d98f1573999f5a81097dbdf26ef5fe5916a97dcf1cbf1bdf631fd3110fb271a391f3f50e631508c0bd89c406debb8facdaecd58828c7a9cea09d76f34c535a435ef07a1ff0a5b9993af471762a14e40368d661c7cf52831a9a742e9bdd939103469349fe67ced09d1c0e82fd9504ba2727046c3eaeaf5c0f2130c1968a0c01d1baa960120ad4681ddf0c8577e7f3265c94a10cb8b49be24e5977fab7a5c4402d118b70f112e49b7446def1c48530efdf414c4d1c71e2b78fd8cb3a1fb1b78fd3e6111b72af3f1ea0163dadde3f0107ce766b2018b73623076d6f46cf1070cc6a89aaf927135daa6a223c2986c552b58800f24f51383f0ddc18e3fb179f4d2f4de47bdced4976d25d7c0309a20220f034d63f9de0cf3a516d7c7d5609c7c872c388beb31d4642282672869cd7bcb335218a0e257cbe1b3e7cb2e249f039acd81c2f7041da217ef49e7a5f8f8f4f9c14d39c867de60912ecc05b0fe147b4f3d60982047302ad2c53bab6ffe0b82a315959d5cc59119c1f694acb1d9fdf46aa0c10478a80dfeed11832f7eb4d0794aa530dc872bba92e4d23d67bf62fdec5ffa6f7ea3e68e2dcd97f52b12fc93a1f848b3663a48d638d3eab955dcac7a2686eda0c02c17bc321cff0e3395b8fc2fd4cf4ceef03d461aade70da30a7ab1c024b65ab0d42a85ca9fee717d7d5cc91ff397e9f5081238da867adad0bc671fdb9c3000af033c723ab0ad98b1a2f98cfe61382ef8695b6862486ad93ce98b1b77195a9ecf177adb1be7b2ef928ea4de1d979bb9fd9328c3b7bd8499fb2a9e00ef50afa38ac88393168cf48d3cec041edb0cda0b2fbadf22f25883fc66e6badec7f5881ee52b20a077553a3f64e08f2503da34cfca2ffd38fc1b8fbc6ca8a10f07a9be4eb4dcacabc36a4d026d48f246e9ad646e70d2d02a9a7989fb8c06eee896aeeeda1fe3282bc5ee7e66ecaed7c49f3b9f30fde4bf638355fe409c6dfcba6cda097c1d9bd92e5325ddbc7a3e0b86ca7228601007ef02a728ddf12240af219cf0f2ebf685f15df4602ec5fd6b62f930f38980a5c0a0b6cf88c4d409fd28d72563f66901ac182367233ebe47bfd9b073e99a241573d403916628ab256443f5a7775f778f0920865c54326b3d16c76f0b889541048218064f7d1829c587fb96e62a5e4354ad259af9926426bdbec30a551aa830b3aebd9617066ab51c7c9d7d12ad00b952ec89b4b95f7e5bbc9780da01d6f9d582df0a2c941c6c120739402ca28a076d5bb561d29c1f9df6e5d5751cda3afbd6ef9734788c7751193092e8f5e0b62e276574f073428ac271a085fee3e257fb28a386c189bcf4ba8316ebc25314dc9b38514415ea354990a9af9b797e5e816fa6d9e22cf3ef49ba8a6e533bfff06b342dd8b915eeefb9ab0c70d611286b4220ce73213f8441c69d968560694f592b6307238c4fcd83667eefe60690cacf6d175da3498350f751dd939bf4390036608a5b512c30072090745c41de6173c977c34d67cc4f3b334361d576b7c78893c1e346162f07e3a53def95a622501a8a7d13534c66e50020736c34e324dd9ea7851b5833f021f846c59f1b5815089cde4bdcf822ae55ecfc2339ba4548b2f8f35b75c9edfcba2514470cffa0ac175ec43d4405008379198f21b8992183d6646c8add869f722a4a0581048e0535b1c301bbc25de14497e2cbc68629575a63c5d86a76e154c42739dff7331f63a610c62e48ab65684e7c1206c405fd5150ab80271cd02483858df05d3d4c28d3609924ac55d9a400a9e3af6779b438135ebea8d6591d3fb29c4d0572c02d8a445c24088bf95b60ece3efd22281a61a5de2c0fca4d8ea34f87d78d675d50d57d1a67a04725fc19b63412ed82ffd82979cf0fffd63bc62b9d25929449b62095f41d9b1f87b1c418806b6e5d76b6a11f993cff9757e80e61400648a4c245f32b4f4bdd5508742aa30cb07f3b25e6f70c4809c0ab0133dc26b024335b1402e8f76d10cb7bd80899d794b06020aa32c70d1869c42fd88228199b2261d72abf3477558e48e2b7f15ba91355c0942506f36200ba2b2c4710274154a6bf850424a2243c0d834649cd240f8c05ef0bb554c093a59a4d2b25035b5061aca201931a3bbead2c76d85ba23f3c0bbb7fe1a67af567dbabb5579dbdb7c3e19f01c263929ea55bd1142a1ffd281c0c674250af92d43447507af39e52631ada502ce241cb32b55b6d7601f7e137fc31725716720305f7baa0da56a6fa68d9954782f1d91da0af36dae186a40838bd5db12dd6b0b39f88ebfaa290a23df2465145584693de95af8ff2399c9e395de8a5e83b5829e01f2cda82dbd0bb1119efb5dfc0e1442d3cbb1a2e10fd427d68b2a37527e69f5a204052e99954a7f64cfb3a953e9a84893c216f4d6b6cc7b9c76cd0097263ee618282a9a358235b19b6dee8156555007f08b8f36133f910f4dfa96c39f57f5747b04678b73d128c0119b2df47b830502614baae7710297ef953ab68a93e3b03ae93ddc6ea82cd90f98aa9233e601039c6c3e5bb26b7f57359e395e83b0d2e8edc05342b021d71b0b75b3d584edad04012c4ca6ea85cdde81908c9afb2214d4e921b07da66157883b4f370249a515cfa56c5832db443252bf484b8d433827969646121d512c56efc45dc33d7228174f2b38c33debe4b2b4037f4010490428a7eae404b7dac0203ea1cecad608d65a2b57ab59c3732232306a72ac013c8cd53e12c56a68a1a1df739089905d83619619cbfe0145dedf911067c1ecd66a8e2a55125a8c55e6ed4b344d61b177328be44a9d19cc1ce86f860a785bcb38f57508b3c077b40c2b41c352cfd2b8fdd9f951982303f2d674433051b25d8be734f78527317233d146296f8bb9702feddca8068fa3825f95c1fcd4acefca2adfef3d295273d28d4afe642ff059a9b383c97c0015320f04131ae58673ed4c6d733475a903500a67a54bbd381e133797a6641c3c4578a40c834513e612ac2e0ff3b947bf7d7ffbe912ee31be0e2e3c87647d5f5e61c0819cd02f94cd55c1461d89b19732107d6f7c38449b1d97db352ce5121729445a163aba8e3bdf9f512191e1fb793e7a5bb62704d1198da2d6f80c00796ca967181db8d716ba0c20f71b5f6c7060cda152c48dc1f008eab5f08b26012ceef7683e6d528c7980b62fca2cec0ffae80d824b90e6754aa57b381c16572935048a4b868b2957ee3a15ea295afcf04f5762463a2709206f098db0b58111343a1d9fcdbbf48927a7fcf6ea28303e2f8402e7eda7ccadfacb433285475cb8ac35448d3042fe62c35d3ef63f3e543f77232171759037778f86eb0d4685897a62efb87aab649bb54e174e5428b34eed223a48cc772fb5817b2c72edf6aa56c043dabb4b5be9bd579c7e6d89f3ac679a0a1450484c2213c34cf106afd9cb751ca2775e9b343dc91667be11799f2867cf280827eb12660b93e01ce6c41bee8923db861148e3e7b4e90348036c4deb22854f38a10240ae2b3a0a046da9d17dba59d19487b0f9da150178a6a2bcee35309c70055495e24c43242d4d99be58fd9502f4e55413652ea5545a987cd5e6abc81894b50a429c10f1f4caf8cdaea674b9b88051e6712d453c6de800011af571a2587bc36572b227474a7015f331444cd9a771bb684d850674e8956a524eabe11395ae213ef74da8f60a8d042190c512f751197074b99479830debd2b73dc0a41071ae5a74dfac1e986dfb7886da0e99e33bc9cb41d770f98f4a4278001edcc1d535af80030dbe2e76085601ad5ee29c5feb648615657a5b2627dd32787a9c2539e950182062ec3ea56f6124f62f8cd6c00e3444446c63b7738ed8f403f87149fe7ddd23468ec7dfd1c7d73507129a89728603af9703c2c14afb6a9ed1c36b179b440b69c7982d68564e4513c43a97236116af882e99f0f886feb3682d38107a8f77fe6d24cf6f1c55a92574251facdeb7c991005f715bb9c8c90a8505eea5c2d42628e11f88c4f2d2fd5df0ebb60a8098a48469bbcdb11f7ad4c3f1cc22fc7038e8a259c9eb9915ecea323be58a6ac1383ccab3ac8a7ed9d14df9c81a0cba200fe7a171d2baf4bc82a37df46068f342b545abcbfa429aa1a8c014f86f70023ed813c0ccb22e7f3ca7891686aa85663879816bf30e334fbc90396594f7ed9c37dcd70e85f78af6b2d2b6adc93fbfff26a09cd80892ccc788f3f487b0781ee3dbc4e3497c10bb9c1938eeba4be2f9a3c70a4157986ea27785376d4544befabe02237d9a53f8e326d68597ed714daa8ee0333ebc6a05fbd6f77ebd0c578d6363fef3891ed67441fffb8c671a992d48279a9d6afd0fb507b6230559f129e1720ace6307023302a02086f4d3cd782fd76b601ba6bab0911862d9f34ba400acd9ec3a1c08a9d9ff9d19f444a7215daf252092732ccef76d2e193e6a4782af11cb3633daccf2d5f5489b70cd9c46c776c08174d88f3988e20000302a6aa47f0e55d9969a3008113eac6ae2eb18d6082ab3bddb"}, 0x1118)
mprotect(&(0x7f0000ff0000/0xd000)=nil, 0xd000, 0xc)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000040), &(0x7f00000001c0)=0xc)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000bc0), 0x9)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c)
lstat(0x0, &(0x7f0000002980))
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000400)={0x7, &(0x7f0000000380)=[{0x3, 0x5, 0x9, 0x9}, {0xffffffffffffff7f, 0x0, 0x8000, 0x2}, {0x0, 0x55, 0x5, 0x4b58}, {0x0, 0x7}, {0x0, 0x0, 0x10000}, {0x0, 0xffff, 0x4, 0x2}, {0x55d5, 0x6, 0x1, 0x8}]}, 0x10)
openat$ashmem(0xffffffffffffff9c, 0x0, 0xe3f1b74c991c0272, 0x0)

13:49:19 executing program 1:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10)
listen(r2, 0x0)
accept4$vsock_stream(r2, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r3 = gettid()
tkill(r3, 0x15)

13:49:19 executing program 2:
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001000090468fe07f02a0000000100ff0704000000450001070300001419001a00120002000b000100030025000000", 0x32}], 0x1)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x64734a2e, 0x20000)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000}}]}})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00'/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', r6})
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340))
r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0)
r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000}}]}})
ioctl$RTC_UIE_OFF(r8, 0x7004)
write$UHID_CREATE2(r7, &(0x7f0000000d80)={0xb, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0x1000, 0x3, 0x9, 0x6, 0x7, 0x7, "0963d80bd45eab1de4f64a9d8eaff772b8a231fa41d362f88e89133ca895ad976a2dfc3058f82e697dcc74594c8a6ae78cdc8c7619f9de608c44251ee35ac9c7ca2cf58a33fd2c5943af1934fa037a6e72dea6ab3f7903ab7d427fab13e5f79d264679d2edf5d69ca2837bd641f5c3dce2528a62dd6326f4967927156dfc96d0c5073aa2c6f61fc28c13ba0ffcdfc54967cf48e5a9dbb8d627356cabbd42db20131728c017b13eeded929fe9eaf951fa5afded908c63d60eaa0e41e7aa6b9897126e3b1dcad4e68d61006b5677b632b762bd444ac417ed0b9bbc8659d4a7a617d642eefa4dc90c11805127053d598826cb373ec7990306a257ebf0ac20e819445e518b2a390db27beda6451758bee2b2ad3845145be530bec8846cd6a94eb459f7ad7bc962805cc4c1c23617ec266fc3d622fbf8f5583ef23701e267261d836bb8328e35fdc3b2288ad4d5b19030f96054d6f3697e386b534ac53f9ac37c68e39401d5c2307f48357ee7c9d56fb86235f06bb95fbb504c42e076c6ef5b703cbc58c5439249fad036b55cc44816504a989bc54264d8de838ae8f1936b113151803b58314467d5a64f4478e3ffead40e4e67a84f240300dbdec676f5106a8831a3f3889100423c88af9aa502a1006ec50203f7cbcc183f6c4e9ad0e6dbd3e3e0bf90ce2a15f9050d2c16485e762ef6c3cb18053382afd7e63774912554b68c79b514ff4fcb8a68de38d45c54be82ac49d4f5bd0a839b9eec4531d3311caeb4e990a3f997ec9d090fd6ec79986f6bb3139b0b3d4002be0561ecb4b90c212eb63d85bd5698cd53fa819af7735690aa3138d049ba372bfd67c3187bfb81973e234c03c32ce2c8c829554f499563ce4abbee2085c5fb17959377d7bf9124716b1c4fcc63ed9c1158eab9ca0e55d0137ac657c998e53c5c8c275b5d7ada7aa7a2e01814c5904f75620537c73a02268d6e8ca0c35fe10470be6b812391c424f7e5e1723595e07b3d19da9c7e61414d36062d6414f67eeb6e6368301f28c1bb6f9e973e8b093e9992c23802f86155e0e2bb982c488ed9b4d4f0b1dc356282f31bb90917d7e340c64a34edc4d3c9147b0f4d0786d4b3028fdc2e607788471544ff291a445c4330dbd557822c4d459c29a8d3e16b4c4de8445b038b14ab9373d26c1612cbeaddf9378eccca16e13ddbbf497bb7dd08bcfb1e32d05a9cd886e81f7779c3769721d4e47038b0e2b0bec012da5521d5fa3b08403dadf8e81ed4b66c0c1cff14e5ce008e5d98f1573999f5a81097dbdf26ef5fe5916a97dcf1cbf1bdf631fd3110fb271a391f3f50e631508c0bd89c406debb8facdaecd58828c7a9cea09d76f34c535a435ef07a1ff0a5b9993af471762a14e40368d661c7cf52831a9a742e9bdd939103469349fe67ced09d1c0e82fd9504ba2727046c3eaeaf5c0f2130c1968a0c01d1baa960120ad4681ddf0c8577e7f3265c94a10cb8b49be24e5977fab7a5c4402d118b70f112e49b7446def1c48530efdf414c4d1c71e2b78fd8cb3a1fb1b78fd3e6111b72af3f1ea0163dadde3f0107ce766b2018b73623076d6f46cf1070cc6a89aaf927135daa6a223c2986c552b58800f24f51383f0ddc18e3fb179f4d2f4de47bdced4976d25d7c0309a20220f034d63f9de0cf3a516d7c7d5609c7c872c388beb31d4642282672869cd7bcb335218a0e257cbe1b3e7cb2e249f039acd81c2f7041da217ef49e7a5f8f8f4f9c14d39c867de60912ecc05b0fe147b4f3d60982047302ad2c53bab6ffe0b82a315959d5cc59119c1f694acb1d9fdf46aa0c10478a80dfeed11832f7eb4d0794aa530dc872bba92e4d23d67bf62fdec5ffa6f7ea3e68e2dcd97f52b12fc93a1f848b3663a48d638d3eab955dcac7a2686eda0c02c17bc321cff0e3395b8fc2fd4cf4ceef03d461aade70da30a7ab1c024b65ab0d42a85ca9fee717d7d5cc91ff397e9f5081238da867adad0bc671fdb9c3000af033c723ab0ad98b1a2f98cfe61382ef8695b6862486ad93ce98b1b77195a9ecf177adb1be7b2ef928ea4de1d979bb9fd9328c3b7bd8499fb2a9e00ef50afa38ac88393168cf48d3cec041edb0cda0b2fbadf22f25883fc66e6badec7f5881ee52b20a077553a3f64e08f2503da34cfca2ffd38fc1b8fbc6ca8a10f07a9be4eb4dcacabc36a4d026d48f246e9ad646e70d2d02a9a7989fb8c06eee896aeeeda1fe3282bc5ee7e66ecaed7c49f3b9f30fde4bf638355fe409c6dfcba6cda097c1d9bd92e5325ddbc7a3e0b86ca7228601007ef02a728ddf12240af219cf0f2ebf685f15df4602ec5fd6b62f930f38980a5c0a0b6cf88c4d409fd28d72563f66901ac182367233ebe47bfd9b073e99a241573d403916628ab256443f5a7775f778f0920865c54326b3d16c76f0b889541048218064f7d1829c587fb96e62a5e4354ad259af9926426bdbec30a551aa830b3aebd9617066ab51c7c9d7d12ad00b952ec89b4b95f7e5bbc9780da01d6f9d582df0a2c941c6c120739402ca28a076d5bb561d29c1f9df6e5d5751cda3afbd6ef9734788c7751193092e8f5e0b62e276574f073428ac271a085fee3e257fb28a386c189bcf4ba8316ebc25314dc9b38514415ea354990a9af9b797e5e816fa6d9e22cf3ef49ba8a6e533bfff06b342dd8b915eeefb9ab0c70d611286b4220ce73213f8441c69d968560694f592b6307238c4fcd83667eefe60690cacf6d175da3498350f751dd939bf4390036608a5b512c30072090745c41de6173c977c34d67cc4f3b334361d576b7c78893c1e346162f07e3a53def95a622501a8a7d13534c66e50020736c34e324dd9ea7851b5833f021f846c59f1b5815089cde4bdcf822ae55ecfc2339ba4548b2f8f35b75c9edfcba2514470cffa0ac175ec43d4405008379198f21b8992183d6646c8add869f722a4a0581048e0535b1c301bbc25de14497e2cbc68629575a63c5d86a76e154c42739dff7331f63a610c62e48ab65684e7c1206c405fd5150ab80271cd02483858df05d3d4c28d3609924ac55d9a400a9e3af6779b438135ebea8d6591d3fb29c4d0572c02d8a445c24088bf95b60ece3efd22281a61a5de2c0fca4d8ea34f87d78d675d50d57d1a67a04725fc19b63412ed82ffd82979cf0fffd63bc62b9d25929449b62095f41d9b1f87b1c418806b6e5d76b6a11f993cff9757e80e61400648a4c245f32b4f4bdd5508742aa30cb07f3b25e6f70c4809c0ab0133dc26b024335b1402e8f76d10cb7bd80899d794b06020aa32c70d1869c42fd88228199b2261d72abf3477558e48e2b7f15ba91355c0942506f36200ba2b2c4710274154a6bf850424a2243c0d834649cd240f8c05ef0bb554c093a59a4d2b25035b5061aca201931a3bbead2c76d85ba23f3c0bbb7fe1a67af567dbabb5579dbdb7c3e19f01c263929ea55bd1142a1ffd281c0c674250af92d43447507af39e52631ada502ce241cb32b55b6d7601f7e137fc31725716720305f7baa0da56a6fa68d9954782f1d91da0af36dae186a40838bd5db12dd6b0b39f88ebfaa290a23df2465145584693de95af8ff2399c9e395de8a5e83b5829e01f2cda82dbd0bb1119efb5dfc0e1442d3cbb1a2e10fd427d68b2a37527e69f5a204052e99954a7f64cfb3a953e9a84893c216f4d6b6cc7b9c76cd0097263ee618282a9a358235b19b6dee8156555007f08b8f36133f910f4dfa96c39f57f5747b04678b73d128c0119b2df47b830502614baae7710297ef953ab68a93e3b03ae93ddc6ea82cd90f98aa9233e601039c6c3e5bb26b7f57359e395e83b0d2e8edc05342b021d71b0b75b3d584edad04012c4ca6ea85cdde81908c9afb2214d4e921b07da66157883b4f370249a515cfa56c5832db443252bf484b8d433827969646121d512c56efc45dc33d7228174f2b38c33debe4b2b4037f4010490428a7eae404b7dac0203ea1cecad608d65a2b57ab59c3732232306a72ac013c8cd53e12c56a68a1a1df739089905d83619619cbfe0145dedf911067c1ecd66a8e2a55125a8c55e6ed4b344d61b177328be44a9d19cc1ce86f860a785bcb38f57508b3c077b40c2b41c352cfd2b8fdd9f951982303f2d674433051b25d8be734f78527317233d146296f8bb9702feddca8068fa3825f95c1fcd4acefca2adfef3d295273d28d4afe642ff059a9b383c97c0015320f04131ae58673ed4c6d733475a903500a67a54bbd381e133797a6641c3c4578a40c834513e612ac2e0ff3b947bf7d7ffbe912ee31be0e2e3c87647d5f5e61c0819cd02f94cd55c1461d89b19732107d6f7c38449b1d97db352ce5121729445a163aba8e3bdf9f512191e1fb793e7a5bb62704d1198da2d6f80c00796ca967181db8d716ba0c20f71b5f6c7060cda152c48dc1f008eab5f08b26012ceef7683e6d528c7980b62fca2cec0ffae80d824b90e6754aa57b381c16572935048a4b868b2957ee3a15ea295afcf04f5762463a2709206f098db0b58111343a1d9fcdbbf48927a7fcf6ea28303e2f8402e7eda7ccadfacb433285475cb8ac35448d3042fe62c35d3ef63f3e543f77232171759037778f86eb0d4685897a62efb87aab649bb54e174e5428b34eed223a48cc772fb5817b2c72edf6aa56c043dabb4b5be9bd579c7e6d89f3ac679a0a1450484c2213c34cf106afd9cb751ca2775e9b343dc91667be11799f2867cf280827eb12660b93e01ce6c41bee8923db861148e3e7b4e90348036c4deb22854f38a10240ae2b3a0a046da9d17dba59d19487b0f9da150178a6a2bcee35309c70055495e24c43242d4d99be58fd9502f4e55413652ea5545a987cd5e6abc81894b50a429c10f1f4caf8cdaea674b9b88051e6712d453c6de800011af571a2587bc36572b227474a7015f331444cd9a771bb684d850674e8956a524eabe11395ae213ef74da8f60a8d042190c512f751197074b99479830debd2b73dc0a41071ae5a74dfac1e986dfb7886da0e99e33bc9cb41d770f98f4a4278001edcc1d535af80030dbe2e76085601ad5ee29c5feb648615657a5b2627dd32787a9c2539e950182062ec3ea56f6124f62f8cd6c00e3444446c63b7738ed8f403f87149fe7ddd23468ec7dfd1c7d73507129a89728603af9703c2c14afb6a9ed1c36b179b440b69c7982d68564e4513c43a97236116af882e99f0f886feb3682d38107a8f77fe6d24cf6f1c55a92574251facdeb7c991005f715bb9c8c90a8505eea5c2d42628e11f88c4f2d2fd5df0ebb60a8098a48469bbcdb11f7ad4c3f1cc22fc7038e8a259c9eb9915ecea323be58a6ac1383ccab3ac8a7ed9d14df9c81a0cba200fe7a171d2baf4bc82a37df46068f342b545abcbfa429aa1a8c014f86f70023ed813c0ccb22e7f3ca7891686aa85663879816bf30e334fbc90396594f7ed9c37dcd70e85f78af6b2d2b6adc93fbfff26a09cd80892ccc788f3f487b0781ee3dbc4e3497c10bb9c1938eeba4be2f9a3c70a4157986ea27785376d4544befabe02237d9a53f8e326d68597ed714daa8ee0333ebc6a05fbd6f77ebd0c578d6363fef3891ed67441fffb8c671a992d48279a9d6afd0fb507b6230559f129e1720ace6307023302a02086f4d3cd782fd76b601ba6bab0911862d9f34ba400acd9ec3a1c08a9d9ff9d19f444a7215daf252092732ccef76d2e193e6a4782af11cb3633daccf2d5f5489b70cd9c46c776c08174d88f3988e20000302a6aa47f0e55d9969a3008113eac6ae2eb18d6082ab3bddb"}, 0x1118)
mprotect(&(0x7f0000ff0000/0xd000)=nil, 0xd000, 0xc)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000040), &(0x7f00000001c0)=0xc)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000bc0), 0x9)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c)
lstat(0x0, &(0x7f0000002980))
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000400)={0x7, &(0x7f0000000380)=[{0x3, 0x5, 0x9, 0x9}, {0xffffffffffffff7f, 0x0, 0x8000, 0x2}, {0x0, 0x55, 0x5, 0x4b58}, {0x0, 0x7}, {0x0, 0x0, 0x10000}, {0x0, 0xffff, 0x4, 0x2}, {0x55d5, 0x6, 0x1, 0x8}]}, 0x10)
openat$ashmem(0xffffffffffffff9c, 0x0, 0xe3f1b74c991c0272, 0x0)

13:49:19 executing program 4:
syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x0, 0x2)
openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000600)={'syz\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1b\x00', {0x0, 0x1, 0x0, 0x8f60}, 0x0, [0x1, 0x0, 0x0, 0x5a, 0x3, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x3ff, 0x0, 0x0, 0x3, 0x9, 0x2, 0x2, 0x3, 0x0, 0x0, 0x6, 0x0, 0x5, 0x3f, 0x20, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0xb15, 0xfffffffffffffffe, 0x0, 0xae8, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x7, 0x1000, 0x200000, 0x0, 0x5, 0xfffffffffffffff8, 0x9, 0x0, 0x2], [0x0, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x0, 0xbe, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x0, 0x100, 0x1, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x6, 0x0, 0x7fff, 0x0, 0x80000000, 0x2, 0x7fff, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x6, 0x0, 0x9, 0x43, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3ae9, 0x0, 0x0, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0], [0x4, 0x1f, 0xfff, 0x0, 0x5a, 0x0, 0x0, 0x200, 0x0, 0x0, 0x4, 0x0, 0xc5, 0x7f, 0x0, 0x0, 0xfffffffffffffff9, 0x6, 0x0, 0xff, 0x0, 0x400, 0x0, 0x7, 0x4, 0x8, 0x0, 0x0, 0xffff, 0x8, 0x4, 0x0, 0x80000000, 0x6, 0x20, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x80000001, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x1, 0x9, 0x800, 0x2, 0x7, 0x2, 0x7], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xffff, 0x3ff, 0x401, 0xe16, 0x2, 0x0, 0x2, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x0, 0x0, 0x3, 0x0, 0x9, 0x3ff, 0x2, 0x0, 0x2, 0x2, 0x9, 0x8, 0x0, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100]}, 0x45c)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x24)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)

13:49:20 executing program 5:
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001000090468fe07f02a0000000100ff0704000000450001070300001419001a00120002000b000100030025000000", 0x32}], 0x1)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x64734a2e, 0x20000)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000}}]}})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00'/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', r6})
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340))
r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0)
r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000}}]}})
ioctl$RTC_UIE_OFF(r8, 0x7004)
write$UHID_CREATE2(r7, &(0x7f0000000d80)={0xb, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0x1000, 0x3, 0x9, 0x6, 0x7, 0x7, "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"}, 0x1118)
mprotect(&(0x7f0000ff0000/0xd000)=nil, 0xd000, 0xc)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000040), &(0x7f00000001c0)=0xc)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000bc0), 0x9)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c)
lstat(0x0, &(0x7f0000002980))
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000400)={0x7, &(0x7f0000000380)=[{0x3, 0x5, 0x9, 0x9}, {0xffffffffffffff7f, 0x0, 0x8000, 0x2}, {0x0, 0x55, 0x5, 0x4b58}, {0x0, 0x7}, {0x0, 0x0, 0x10000}, {0x0, 0xffff, 0x4, 0x2}, {0x55d5, 0x6, 0x1, 0x8}]}, 0x10)
openat$ashmem(0xffffffffffffff9c, 0x0, 0xe3f1b74c991c0272, 0x0)

[  663.324423][T17170] 9pnet: Insufficient options for proto=fd
13:49:20 executing program 0:
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001000090468fe07f02a0000000100ff0704000000450001070300001419001a00120002000b000100030025000000", 0x32}], 0x1)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x64734a2e, 0x20000)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000}}]}})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00'/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', r6})
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340))
r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0)
r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000}}]}})
ioctl$RTC_UIE_OFF(r8, 0x7004)
write$UHID_CREATE2(r7, &(0x7f0000000d80)={0xb, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0x1000, 0x3, 0x9, 0x6, 0x7, 0x7, "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"}, 0x1118)
mprotect(&(0x7f0000ff0000/0xd000)=nil, 0xd000, 0xc)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000040), &(0x7f00000001c0)=0xc)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000bc0), 0x9)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c)
lstat(0x0, &(0x7f0000002980))
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000400)={0x7, &(0x7f0000000380)=[{0x3, 0x5, 0x9, 0x9}, {0xffffffffffffff7f, 0x0, 0x8000, 0x2}, {0x0, 0x55, 0x5, 0x4b58}, {0x0, 0x7}, {0x0, 0x0, 0x10000}, {0x0, 0xffff, 0x4, 0x2}, {0x55d5, 0x6, 0x1, 0x8}]}, 0x10)
openat$ashmem(0xffffffffffffff9c, 0x0, 0xe3f1b74c991c0272, 0x0)

[  663.399379][T17170] fuse: Bad value for 'fd'
13:49:20 executing program 4:
syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x0, 0x2)
openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000600)={'syz\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1b\x00', {0x0, 0x1, 0x0, 0x8f60}, 0x0, [0x1, 0x0, 0x0, 0x5a, 0x3, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x3ff, 0x0, 0x0, 0x3, 0x9, 0x2, 0x2, 0x3, 0x0, 0x0, 0x6, 0x0, 0x5, 0x3f, 0x20, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0xb15, 0xfffffffffffffffe, 0x0, 0xae8, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x7, 0x1000, 0x200000, 0x0, 0x5, 0xfffffffffffffff8, 0x9, 0x0, 0x2], [0x0, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x0, 0xbe, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x0, 0x100, 0x1, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x6, 0x0, 0x7fff, 0x0, 0x80000000, 0x2, 0x7fff, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x6, 0x0, 0x9, 0x43, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3ae9, 0x0, 0x0, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0], [0x4, 0x1f, 0xfff, 0x0, 0x5a, 0x0, 0x0, 0x200, 0x0, 0x0, 0x4, 0x0, 0xc5, 0x7f, 0x0, 0x0, 0xfffffffffffffff9, 0x6, 0x0, 0xff, 0x0, 0x400, 0x0, 0x7, 0x4, 0x8, 0x0, 0x0, 0xffff, 0x8, 0x4, 0x0, 0x80000000, 0x6, 0x20, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x80000001, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x1, 0x9, 0x800, 0x2, 0x7, 0x2, 0x7], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xffff, 0x3ff, 0x401, 0xe16, 0x2, 0x0, 0x2, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x0, 0x0, 0x3, 0x0, 0x9, 0x3ff, 0x2, 0x0, 0x2, 0x2, 0x9, 0x8, 0x0, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100]}, 0x45c)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x24)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)

[  663.465684][T17170] 9pnet: Insufficient options for proto=fd
13:49:20 executing program 5:
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001000090468fe07f02a0000000100ff0704000000450001070300001419001a00120002000b000100030025000000", 0x32}], 0x1)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x64734a2e, 0x20000)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000}}]}})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00'/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', r6})
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340))
r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0)
r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000}}]}})
ioctl$RTC_UIE_OFF(r8, 0x7004)
write$UHID_CREATE2(r7, &(0x7f0000000d80)={0xb, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0x1000, 0x3, 0x9, 0x6, 0x7, 0x7, "0963d80bd45eab1de4f64a9d8eaff772b8a231fa41d362f88e89133ca895ad976a2dfc3058f82e697dcc74594c8a6ae78cdc8c7619f9de608c44251ee35ac9c7ca2cf58a33fd2c5943af1934fa037a6e72dea6ab3f7903ab7d427fab13e5f79d264679d2edf5d69ca2837bd641f5c3dce2528a62dd6326f4967927156dfc96d0c5073aa2c6f61fc28c13ba0ffcdfc54967cf48e5a9dbb8d627356cabbd42db20131728c017b13eeded929fe9eaf951fa5afded908c63d60eaa0e41e7aa6b9897126e3b1dcad4e68d61006b5677b632b762bd444ac417ed0b9bbc8659d4a7a617d642eefa4dc90c11805127053d598826cb373ec7990306a257ebf0ac20e819445e518b2a390db27beda6451758bee2b2ad3845145be530bec8846cd6a94eb459f7ad7bc962805cc4c1c23617ec266fc3d622fbf8f5583ef23701e267261d836bb8328e35fdc3b2288ad4d5b19030f96054d6f3697e386b534ac53f9ac37c68e39401d5c2307f48357ee7c9d56fb86235f06bb95fbb504c42e076c6ef5b703cbc58c5439249fad036b55cc44816504a989bc54264d8de838ae8f1936b113151803b58314467d5a64f4478e3ffead40e4e67a84f240300dbdec676f5106a8831a3f3889100423c88af9aa502a1006ec50203f7cbcc183f6c4e9ad0e6dbd3e3e0bf90ce2a15f9050d2c16485e762ef6c3cb18053382afd7e63774912554b68c79b514ff4fcb8a68de38d45c54be82ac49d4f5bd0a839b9eec4531d3311caeb4e990a3f997ec9d090fd6ec79986f6bb3139b0b3d4002be0561ecb4b90c212eb63d85bd5698cd53fa819af7735690aa3138d049ba372bfd67c3187bfb81973e234c03c32ce2c8c829554f499563ce4abbee2085c5fb17959377d7bf9124716b1c4fcc63ed9c1158eab9ca0e55d0137ac657c998e53c5c8c275b5d7ada7aa7a2e01814c5904f75620537c73a02268d6e8ca0c35fe10470be6b812391c424f7e5e1723595e07b3d19da9c7e61414d36062d6414f67eeb6e6368301f28c1bb6f9e973e8b093e9992c23802f86155e0e2bb982c488ed9b4d4f0b1dc356282f31bb90917d7e340c64a34edc4d3c9147b0f4d0786d4b3028fdc2e607788471544ff291a445c4330dbd557822c4d459c29a8d3e16b4c4de8445b038b14ab9373d26c1612cbeaddf9378eccca16e13ddbbf497bb7dd08bcfb1e32d05a9cd886e81f7779c3769721d4e47038b0e2b0bec012da5521d5fa3b08403dadf8e81ed4b66c0c1cff14e5ce008e5d98f1573999f5a81097dbdf26ef5fe5916a97dcf1cbf1bdf631fd3110fb271a391f3f50e631508c0bd89c406debb8facdaecd58828c7a9cea09d76f34c535a435ef07a1ff0a5b9993af471762a14e40368d661c7cf52831a9a742e9bdd939103469349fe67ced09d1c0e82fd9504ba2727046c3eaeaf5c0f2130c1968a0c01d1baa960120ad4681ddf0c8577e7f3265c94a10cb8b49be24e5977fab7a5c4402d118b70f112e49b7446def1c48530efdf414c4d1c71e2b78fd8cb3a1fb1b78fd3e6111b72af3f1ea0163dadde3f0107ce766b2018b73623076d6f46cf1070cc6a89aaf927135daa6a223c2986c552b58800f24f51383f0ddc18e3fb179f4d2f4de47bdced4976d25d7c0309a20220f034d63f9de0cf3a516d7c7d5609c7c872c388beb31d4642282672869cd7bcb335218a0e257cbe1b3e7cb2e249f039acd81c2f7041da217ef49e7a5f8f8f4f9c14d39c867de60912ecc05b0fe147b4f3d60982047302ad2c53bab6ffe0b82a315959d5cc59119c1f694acb1d9fdf46aa0c10478a80dfeed11832f7eb4d0794aa530dc872bba92e4d23d67bf62fdec5ffa6f7ea3e68e2dcd97f52b12fc93a1f848b3663a48d638d3eab955dcac7a2686eda0c02c17bc321cff0e3395b8fc2fd4cf4ceef03d461aade70da30a7ab1c024b65ab0d42a85ca9fee717d7d5cc91ff397e9f5081238da867adad0bc671fdb9c3000af033c723ab0ad98b1a2f98cfe61382ef8695b6862486ad93ce98b1b77195a9ecf177adb1be7b2ef928ea4de1d979bb9fd9328c3b7bd8499fb2a9e00ef50afa38ac88393168cf48d3cec041edb0cda0b2fbadf22f25883fc66e6badec7f5881ee52b20a077553a3f64e08f2503da34cfca2ffd38fc1b8fbc6ca8a10f07a9be4eb4dcacabc36a4d026d48f246e9ad646e70d2d02a9a7989fb8c06eee896aeeeda1fe3282bc5ee7e66ecaed7c49f3b9f30fde4bf638355fe409c6dfcba6cda097c1d9bd92e5325ddbc7a3e0b86ca7228601007ef02a728ddf12240af219cf0f2ebf685f15df4602ec5fd6b62f930f38980a5c0a0b6cf88c4d409fd28d72563f66901ac182367233ebe47bfd9b073e99a241573d403916628ab256443f5a7775f778f0920865c54326b3d16c76f0b889541048218064f7d1829c587fb96e62a5e4354ad259af9926426bdbec30a551aa830b3aebd9617066ab51c7c9d7d12ad00b952ec89b4b95f7e5bbc9780da01d6f9d582df0a2c941c6c120739402ca28a076d5bb561d29c1f9df6e5d5751cda3afbd6ef9734788c7751193092e8f5e0b62e276574f073428ac271a085fee3e257fb28a386c189bcf4ba8316ebc25314dc9b38514415ea354990a9af9b797e5e816fa6d9e22cf3ef49ba8a6e533bfff06b342dd8b915eeefb9ab0c70d611286b4220ce73213f8441c69d968560694f592b6307238c4fcd83667eefe60690cacf6d175da3498350f751dd939bf4390036608a5b512c30072090745c41de6173c977c34d67cc4f3b334361d576b7c78893c1e346162f07e3a53def95a622501a8a7d13534c66e50020736c34e324dd9ea7851b5833f021f846c59f1b5815089cde4bdcf822ae55ecfc2339ba4548b2f8f35b75c9edfcba2514470cffa0ac175ec43d4405008379198f21b8992183d6646c8add869f722a4a0581048e0535b1c301bbc25de14497e2cbc68629575a63c5d86a76e154c42739dff7331f63a610c62e48ab65684e7c1206c405fd5150ab80271cd02483858df05d3d4c28d3609924ac55d9a400a9e3af6779b438135ebea8d6591d3fb29c4d0572c02d8a445c24088bf95b60ece3efd22281a61a5de2c0fca4d8ea34f87d78d675d50d57d1a67a04725fc19b63412ed82ffd82979cf0fffd63bc62b9d25929449b62095f41d9b1f87b1c418806b6e5d76b6a11f993cff9757e80e61400648a4c245f32b4f4bdd5508742aa30cb07f3b25e6f70c4809c0ab0133dc26b024335b1402e8f76d10cb7bd80899d794b06020aa32c70d1869c42fd88228199b2261d72abf3477558e48e2b7f15ba91355c0942506f36200ba2b2c4710274154a6bf850424a2243c0d834649cd240f8c05ef0bb554c093a59a4d2b25035b5061aca201931a3bbead2c76d85ba23f3c0bbb7fe1a67af567dbabb5579dbdb7c3e19f01c263929ea55bd1142a1ffd281c0c674250af92d43447507af39e52631ada502ce241cb32b55b6d7601f7e137fc31725716720305f7baa0da56a6fa68d9954782f1d91da0af36dae186a40838bd5db12dd6b0b39f88ebfaa290a23df2465145584693de95af8ff2399c9e395de8a5e83b5829e01f2cda82dbd0bb1119efb5dfc0e1442d3cbb1a2e10fd427d68b2a37527e69f5a204052e99954a7f64cfb3a953e9a84893c216f4d6b6cc7b9c76cd0097263ee618282a9a358235b19b6dee8156555007f08b8f36133f910f4dfa96c39f57f5747b04678b73d128c0119b2df47b830502614baae7710297ef953ab68a93e3b03ae93ddc6ea82cd90f98aa9233e601039c6c3e5bb26b7f57359e395e83b0d2e8edc05342b021d71b0b75b3d584edad04012c4ca6ea85cdde81908c9afb2214d4e921b07da66157883b4f370249a515cfa56c5832db443252bf484b8d433827969646121d512c56efc45dc33d7228174f2b38c33debe4b2b4037f4010490428a7eae404b7dac0203ea1cecad608d65a2b57ab59c3732232306a72ac013c8cd53e12c56a68a1a1df739089905d83619619cbfe0145dedf911067c1ecd66a8e2a55125a8c55e6ed4b344d61b177328be44a9d19cc1ce86f860a785bcb38f57508b3c077b40c2b41c352cfd2b8fdd9f951982303f2d674433051b25d8be734f78527317233d146296f8bb9702feddca8068fa3825f95c1fcd4acefca2adfef3d295273d28d4afe642ff059a9b383c97c0015320f04131ae58673ed4c6d733475a903500a67a54bbd381e133797a6641c3c4578a40c834513e612ac2e0ff3b947bf7d7ffbe912ee31be0e2e3c87647d5f5e61c0819cd02f94cd55c1461d89b19732107d6f7c38449b1d97db352ce5121729445a163aba8e3bdf9f512191e1fb793e7a5bb62704d1198da2d6f80c00796ca967181db8d716ba0c20f71b5f6c7060cda152c48dc1f008eab5f08b26012ceef7683e6d528c7980b62fca2cec0ffae80d824b90e6754aa57b381c16572935048a4b868b2957ee3a15ea295afcf04f5762463a2709206f098db0b58111343a1d9fcdbbf48927a7fcf6ea28303e2f8402e7eda7ccadfacb433285475cb8ac35448d3042fe62c35d3ef63f3e543f77232171759037778f86eb0d4685897a62efb87aab649bb54e174e5428b34eed223a48cc772fb5817b2c72edf6aa56c043dabb4b5be9bd579c7e6d89f3ac679a0a1450484c2213c34cf106afd9cb751ca2775e9b343dc91667be11799f2867cf280827eb12660b93e01ce6c41bee8923db861148e3e7b4e90348036c4deb22854f38a10240ae2b3a0a046da9d17dba59d19487b0f9da150178a6a2bcee35309c70055495e24c43242d4d99be58fd9502f4e55413652ea5545a987cd5e6abc81894b50a429c10f1f4caf8cdaea674b9b88051e6712d453c6de800011af571a2587bc36572b227474a7015f331444cd9a771bb684d850674e8956a524eabe11395ae213ef74da8f60a8d042190c512f751197074b99479830debd2b73dc0a41071ae5a74dfac1e986dfb7886da0e99e33bc9cb41d770f98f4a4278001edcc1d535af80030dbe2e76085601ad5ee29c5feb648615657a5b2627dd32787a9c2539e950182062ec3ea56f6124f62f8cd6c00e3444446c63b7738ed8f403f87149fe7ddd23468ec7dfd1c7d73507129a89728603af9703c2c14afb6a9ed1c36b179b440b69c7982d68564e4513c43a97236116af882e99f0f886feb3682d38107a8f77fe6d24cf6f1c55a92574251facdeb7c991005f715bb9c8c90a8505eea5c2d42628e11f88c4f2d2fd5df0ebb60a8098a48469bbcdb11f7ad4c3f1cc22fc7038e8a259c9eb9915ecea323be58a6ac1383ccab3ac8a7ed9d14df9c81a0cba200fe7a171d2baf4bc82a37df46068f342b545abcbfa429aa1a8c014f86f70023ed813c0ccb22e7f3ca7891686aa85663879816bf30e334fbc90396594f7ed9c37dcd70e85f78af6b2d2b6adc93fbfff26a09cd80892ccc788f3f487b0781ee3dbc4e3497c10bb9c1938eeba4be2f9a3c70a4157986ea27785376d4544befabe02237d9a53f8e326d68597ed714daa8ee0333ebc6a05fbd6f77ebd0c578d6363fef3891ed67441fffb8c671a992d48279a9d6afd0fb507b6230559f129e1720ace6307023302a02086f4d3cd782fd76b601ba6bab0911862d9f34ba400acd9ec3a1c08a9d9ff9d19f444a7215daf252092732ccef76d2e193e6a4782af11cb3633daccf2d5f5489b70cd9c46c776c08174d88f3988e20000302a6aa47f0e55d9969a3008113eac6ae2eb18d6082ab3bddb"}, 0x1118)
mprotect(&(0x7f0000ff0000/0xd000)=nil, 0xd000, 0xc)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000040), &(0x7f00000001c0)=0xc)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000bc0), 0x9)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c)
lstat(0x0, &(0x7f0000002980))
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000400)={0x7, &(0x7f0000000380)=[{0x3, 0x5, 0x9, 0x9}, {0xffffffffffffff7f, 0x0, 0x8000, 0x2}, {0x0, 0x55, 0x5, 0x4b58}, {0x0, 0x7}, {0x0, 0x0, 0x10000}, {0x0, 0xffff, 0x4, 0x2}, {0x55d5, 0x6, 0x1, 0x8}]}, 0x10)
openat$ashmem(0xffffffffffffff9c, 0x0, 0xe3f1b74c991c0272, 0x0)

13:49:20 executing program 3:
syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x0, 0x2)
openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000600)={'syz\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1b\x00', {0x0, 0x1, 0x0, 0x8f60}, 0x0, [0x1, 0x0, 0x0, 0x5a, 0x3, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x3ff, 0x0, 0x0, 0x3, 0x9, 0x2, 0x2, 0x3, 0x0, 0x0, 0x6, 0x0, 0x5, 0x3f, 0x20, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0xb15, 0xfffffffffffffffe, 0x0, 0xae8, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x7, 0x1000, 0x200000, 0x0, 0x5, 0xfffffffffffffff8, 0x9, 0x0, 0x2], [0x0, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x0, 0xbe, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x0, 0x100, 0x1, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x6, 0x0, 0x7fff, 0x0, 0x80000000, 0x2, 0x7fff, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x6, 0x0, 0x9, 0x43, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3ae9, 0x0, 0x0, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0], [0x4, 0x1f, 0xfff, 0x0, 0x5a, 0x0, 0x0, 0x200, 0x0, 0x0, 0x4, 0x0, 0xc5, 0x7f, 0x0, 0x0, 0xfffffffffffffff9, 0x6, 0x0, 0xff, 0x0, 0x400, 0x0, 0x7, 0x4, 0x8, 0x0, 0x0, 0xffff, 0x8, 0x4, 0x0, 0x80000000, 0x6, 0x20, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x80000001, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x1, 0x9, 0x800, 0x2, 0x7, 0x2, 0x7], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xffff, 0x3ff, 0x401, 0xe16, 0x2, 0x0, 0x2, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x0, 0x0, 0x3, 0x0, 0x9, 0x3ff, 0x2, 0x0, 0x2, 0x2, 0x9, 0x8, 0x0, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100]}, 0x45c)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x24)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)

13:49:20 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x2, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1011, r0, 0x0)

13:49:21 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = dup3(r1, r2, 0x0)
dup2(r4, r3)

13:49:21 executing program 0:
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001000090468fe07f02a0000000100ff0704000000450001070300001419001a00120002000b000100030025000000", 0x32}], 0x1)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x64734a2e, 0x20000)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000}}]}})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00'/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', r6})
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340))
r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0)
r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000}}]}})
ioctl$RTC_UIE_OFF(r8, 0x7004)
write$UHID_CREATE2(r7, &(0x7f0000000d80)={0xb, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0x1000, 0x3, 0x9, 0x6, 0x7, 0x7, "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"}, 0x1118)
mprotect(&(0x7f0000ff0000/0xd000)=nil, 0xd000, 0xc)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000040), &(0x7f00000001c0)=0xc)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000bc0), 0x9)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c)
lstat(0x0, &(0x7f0000002980))
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000400)={0x7, &(0x7f0000000380)=[{0x3, 0x5, 0x9, 0x9}, {0xffffffffffffff7f, 0x0, 0x8000, 0x2}, {0x0, 0x55, 0x5, 0x4b58}, {0x0, 0x7}, {0x0, 0x0, 0x10000}, {0x0, 0xffff, 0x4, 0x2}, {0x55d5, 0x6, 0x1, 0x8}]}, 0x10)
openat$ashmem(0xffffffffffffff9c, 0x0, 0xe3f1b74c991c0272, 0x0)

13:49:21 executing program 3:
syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x0, 0x2)
openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000600)={'syz\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1b\x00', {0x0, 0x1, 0x0, 0x8f60}, 0x0, [0x1, 0x0, 0x0, 0x5a, 0x3, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x3ff, 0x0, 0x0, 0x3, 0x9, 0x2, 0x2, 0x3, 0x0, 0x0, 0x6, 0x0, 0x5, 0x3f, 0x20, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0xb15, 0xfffffffffffffffe, 0x0, 0xae8, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x7, 0x1000, 0x200000, 0x0, 0x5, 0xfffffffffffffff8, 0x9, 0x0, 0x2], [0x0, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x0, 0xbe, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x0, 0x100, 0x1, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x6, 0x0, 0x7fff, 0x0, 0x80000000, 0x2, 0x7fff, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x6, 0x0, 0x9, 0x43, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3ae9, 0x0, 0x0, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0], [0x4, 0x1f, 0xfff, 0x0, 0x5a, 0x0, 0x0, 0x200, 0x0, 0x0, 0x4, 0x0, 0xc5, 0x7f, 0x0, 0x0, 0xfffffffffffffff9, 0x6, 0x0, 0xff, 0x0, 0x400, 0x0, 0x7, 0x4, 0x8, 0x0, 0x0, 0xffff, 0x8, 0x4, 0x0, 0x80000000, 0x6, 0x20, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x80000001, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x1, 0x9, 0x800, 0x2, 0x7, 0x2, 0x7], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xffff, 0x3ff, 0x401, 0xe16, 0x2, 0x0, 0x2, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x0, 0x0, 0x3, 0x0, 0x9, 0x3ff, 0x2, 0x0, 0x2, 0x2, 0x9, 0x8, 0x0, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100]}, 0x45c)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x24)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)

13:49:21 executing program 4:
syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x0, 0x2)
openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000600)={'syz\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1b\x00', {0x0, 0x1, 0x0, 0x8f60}, 0x0, [0x1, 0x0, 0x0, 0x5a, 0x3, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x3ff, 0x0, 0x0, 0x3, 0x9, 0x2, 0x2, 0x3, 0x0, 0x0, 0x6, 0x0, 0x5, 0x3f, 0x20, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0xb15, 0xfffffffffffffffe, 0x0, 0xae8, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x7, 0x1000, 0x200000, 0x0, 0x5, 0xfffffffffffffff8, 0x9, 0x0, 0x2], [0x0, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x0, 0xbe, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x0, 0x100, 0x1, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x6, 0x0, 0x7fff, 0x0, 0x80000000, 0x2, 0x7fff, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x6, 0x0, 0x9, 0x43, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3ae9, 0x0, 0x0, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0], [0x4, 0x1f, 0xfff, 0x0, 0x5a, 0x0, 0x0, 0x200, 0x0, 0x0, 0x4, 0x0, 0xc5, 0x7f, 0x0, 0x0, 0xfffffffffffffff9, 0x6, 0x0, 0xff, 0x0, 0x400, 0x0, 0x7, 0x4, 0x8, 0x0, 0x0, 0xffff, 0x8, 0x4, 0x0, 0x80000000, 0x6, 0x20, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x80000001, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x1, 0x9, 0x800, 0x2, 0x7, 0x2, 0x7], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xffff, 0x3ff, 0x401, 0xe16, 0x2, 0x0, 0x2, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x0, 0x0, 0x3, 0x0, 0x9, 0x3ff, 0x2, 0x0, 0x2, 0x2, 0x9, 0x8, 0x0, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100]}, 0x45c)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x24)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)

[  666.030606][T14259] device bridge_slave_1 left promiscuous mode
[  666.036904][T14259] bridge0: port 2(bridge_slave_1) entered disabled state
[  666.080600][T14259] device bridge_slave_0 left promiscuous mode
[  666.086804][T14259] bridge0: port 1(bridge_slave_0) entered disabled state
[  666.850303][T14259] device hsr_slave_0 left promiscuous mode
[  666.909867][T14259] device hsr_slave_1 left promiscuous mode
[  666.995652][T14259] team0 (unregistering): Port device team_slave_1 removed
[  667.007074][T14259] team0 (unregistering): Port device team_slave_0 removed
[  667.017941][T14259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  667.065863][T14259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  667.141389][T14259] bond0 (unregistering): Released all slaves
[  667.276001][T17202] IPVS: ftp: loaded support on port[0] = 21
[  667.334676][T17202] chnl_net:caif_netlink_parms(): no params data found
[  667.363010][T17202] bridge0: port 1(bridge_slave_0) entered blocking state
[  667.370235][T17202] bridge0: port 1(bridge_slave_0) entered disabled state
[  667.377742][T17202] device bridge_slave_0 entered promiscuous mode
[  667.386262][T17202] bridge0: port 2(bridge_slave_1) entered blocking state
[  667.393454][T17202] bridge0: port 2(bridge_slave_1) entered disabled state
[  667.401522][T17202] device bridge_slave_1 entered promiscuous mode
[  667.472553][T17202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  667.483589][T17202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  667.504997][T17202] team0: Port device team_slave_0 added
[  667.511849][T17202] team0: Port device team_slave_1 added
[  667.582296][T17202] device hsr_slave_0 entered promiscuous mode
[  667.620568][T17202] device hsr_slave_1 entered promiscuous mode
[  667.667954][T17202] bridge0: port 2(bridge_slave_1) entered blocking state
[  667.675137][T17202] bridge0: port 2(bridge_slave_1) entered forwarding state
[  667.682446][T17202] bridge0: port 1(bridge_slave_0) entered blocking state
[  667.689568][T17202] bridge0: port 1(bridge_slave_0) entered forwarding state
[  667.738054][T17202] 8021q: adding VLAN 0 to HW filter on device bond0
[  667.758227][ T8071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  667.772922][ T8071] bridge0: port 1(bridge_slave_0) entered disabled state
[  667.784976][ T8071] bridge0: port 2(bridge_slave_1) entered disabled state
[  667.805932][T17202] 8021q: adding VLAN 0 to HW filter on device team0
[  667.818401][ T8071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  667.832595][ T8071] bridge0: port 1(bridge_slave_0) entered blocking state
[  667.839660][ T8071] bridge0: port 1(bridge_slave_0) entered forwarding state
[  667.864393][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  667.873162][ T8073] bridge0: port 2(bridge_slave_1) entered blocking state
[  667.880333][ T8073] bridge0: port 2(bridge_slave_1) entered forwarding state
[  667.901802][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  667.915617][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  667.925718][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  667.942134][T17202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  667.953776][T17202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  667.963186][ T8071] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  667.971724][ T8071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  667.994897][ T8071] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  668.002772][ T8071] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  668.014499][T17202] 8021q: adding VLAN 0 to HW filter on device batadv0
13:49:25 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = dup3(r1, r2, 0x0)
dup2(r4, r3)

13:49:25 executing program 0:
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001000090468fe07f02a0000000100ff0704000000450001070300001419001a00120002000b000100030025000000", 0x32}], 0x1)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x64734a2e, 0x20000)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000}}]}})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00'/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', r6})
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340))
r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0)
r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000}}]}})
ioctl$RTC_UIE_OFF(r8, 0x7004)
write$UHID_CREATE2(r7, &(0x7f0000000d80)={0xb, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0x1000, 0x3, 0x9, 0x6, 0x7, 0x7, "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"}, 0x1118)
mprotect(&(0x7f0000ff0000/0xd000)=nil, 0xd000, 0xc)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000040), &(0x7f00000001c0)=0xc)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000bc0), 0x9)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c)
lstat(0x0, &(0x7f0000002980))
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000400)={0x7, &(0x7f0000000380)=[{0x3, 0x5, 0x9, 0x9}, {0xffffffffffffff7f, 0x0, 0x8000, 0x2}, {0x0, 0x55, 0x5, 0x4b58}, {0x0, 0x7}, {0x0, 0x0, 0x10000}, {0x0, 0xffff, 0x4, 0x2}, {0x55d5, 0x6, 0x1, 0x8}]}, 0x10)
openat$ashmem(0xffffffffffffff9c, 0x0, 0xe3f1b74c991c0272, 0x0)

13:49:25 executing program 4:
syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x0, 0x2)
openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000600)={'syz\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1b\x00', {0x0, 0x1, 0x0, 0x8f60}, 0x0, [0x1, 0x0, 0x0, 0x5a, 0x3, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x3ff, 0x0, 0x0, 0x3, 0x9, 0x2, 0x2, 0x3, 0x0, 0x0, 0x6, 0x0, 0x5, 0x3f, 0x20, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0xb15, 0xfffffffffffffffe, 0x0, 0xae8, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x7, 0x1000, 0x200000, 0x0, 0x5, 0xfffffffffffffff8, 0x9, 0x0, 0x2], [0x0, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x0, 0xbe, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x0, 0x100, 0x1, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x6, 0x0, 0x7fff, 0x0, 0x80000000, 0x2, 0x7fff, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x6, 0x0, 0x9, 0x43, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3ae9, 0x0, 0x0, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0], [0x4, 0x1f, 0xfff, 0x0, 0x5a, 0x0, 0x0, 0x200, 0x0, 0x0, 0x4, 0x0, 0xc5, 0x7f, 0x0, 0x0, 0xfffffffffffffff9, 0x6, 0x0, 0xff, 0x0, 0x400, 0x0, 0x7, 0x4, 0x8, 0x0, 0x0, 0xffff, 0x8, 0x4, 0x0, 0x80000000, 0x6, 0x20, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x80000001, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x1, 0x9, 0x800, 0x2, 0x7, 0x2, 0x7], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xffff, 0x3ff, 0x401, 0xe16, 0x2, 0x0, 0x2, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x0, 0x0, 0x3, 0x0, 0x9, 0x3ff, 0x2, 0x0, 0x2, 0x2, 0x9, 0x8, 0x0, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100]}, 0x45c)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x24)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)

13:49:25 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = dup3(r1, r2, 0x0)
dup2(r4, r3)

13:49:25 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
pipe(&(0x7f00000003c0))
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x2000)=nil], &(0x7f00000001c0)=[0x1], &(0x7f0000000200), 0x0)

13:49:25 executing program 3:
syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x0, 0x2)
openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000600)={'syz\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1b\x00', {0x0, 0x1, 0x0, 0x8f60}, 0x0, [0x1, 0x0, 0x0, 0x5a, 0x3, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x3ff, 0x0, 0x0, 0x3, 0x9, 0x2, 0x2, 0x3, 0x0, 0x0, 0x6, 0x0, 0x5, 0x3f, 0x20, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0xb15, 0xfffffffffffffffe, 0x0, 0xae8, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x7, 0x1000, 0x200000, 0x0, 0x5, 0xfffffffffffffff8, 0x9, 0x0, 0x2], [0x0, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x0, 0xbe, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x0, 0x100, 0x1, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x6, 0x0, 0x7fff, 0x0, 0x80000000, 0x2, 0x7fff, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x6, 0x0, 0x9, 0x43, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3ae9, 0x0, 0x0, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0], [0x4, 0x1f, 0xfff, 0x0, 0x5a, 0x0, 0x0, 0x200, 0x0, 0x0, 0x4, 0x0, 0xc5, 0x7f, 0x0, 0x0, 0xfffffffffffffff9, 0x6, 0x0, 0xff, 0x0, 0x400, 0x0, 0x7, 0x4, 0x8, 0x0, 0x0, 0xffff, 0x8, 0x4, 0x0, 0x80000000, 0x6, 0x20, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x80000001, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x1, 0x9, 0x800, 0x2, 0x7, 0x2, 0x7], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xffff, 0x3ff, 0x401, 0xe16, 0x2, 0x0, 0x2, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x0, 0x0, 0x3, 0x0, 0x9, 0x3ff, 0x2, 0x0, 0x2, 0x2, 0x9, 0x8, 0x0, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100]}, 0x45c)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x24)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)

13:49:25 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = dup3(r1, r2, 0x0)
dup2(r4, r3)

13:49:26 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
pipe(&(0x7f00000003c0))
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x2000)=nil], &(0x7f00000001c0)=[0x1], &(0x7f0000000200), 0x0)

13:49:26 executing program 4:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
pipe(&(0x7f00000003c0))
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x2000)=nil], &(0x7f00000001c0)=[0x1], &(0x7f0000000200), 0x0)

13:49:26 executing program 3:
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000001c0)="6764673e67660f29c036670f350fc76b00baa000ed0f20063e0f30660f3a4445879ef082437a0066b99903000066b80f00000066ba000000000f3036c20080"}], 0x1, 0x0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000040)={0x0, 0x0, 0xbfa})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x100000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:49:26 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
pipe(&(0x7f00000003c0))
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x2000)=nil], &(0x7f00000001c0)=[0x1], &(0x7f0000000200), 0x0)

13:49:26 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000580)={0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x48}}, 0x0)

[  671.160676][T14259] device bridge_slave_1 left promiscuous mode
[  671.167025][T14259] bridge0: port 2(bridge_slave_1) entered disabled state
[  671.230557][T14259] device bridge_slave_0 left promiscuous mode
[  671.236777][T14259] bridge0: port 1(bridge_slave_0) entered disabled state
[  671.291325][T14259] device bridge_slave_1 left promiscuous mode
[  671.297554][T14259] bridge0: port 2(bridge_slave_1) entered disabled state
[  671.340485][T14259] device bridge_slave_0 left promiscuous mode
[  671.346712][T14259] bridge0: port 1(bridge_slave_0) entered disabled state
[  672.741021][T14259] device hsr_slave_0 left promiscuous mode
[  672.809852][T14259] device hsr_slave_1 left promiscuous mode
[  672.875959][T14259] team0 (unregistering): Port device team_slave_1 removed
[  672.886449][T14259] team0 (unregistering): Port device team_slave_0 removed
[  672.897345][T14259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  672.934521][T14259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  672.991247][T14259] bond0 (unregistering): Released all slaves
[  673.152911][T14259] device hsr_slave_0 left promiscuous mode
[  673.189883][T14259] device hsr_slave_1 left promiscuous mode
[  673.246823][T14259] team0 (unregistering): Port device team_slave_1 removed
[  673.257705][T14259] team0 (unregistering): Port device team_slave_0 removed
[  673.268835][T14259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  673.293334][T14259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  673.371593][T14259] bond0 (unregistering): Released all slaves
[  673.467314][T17248] IPVS: ftp: loaded support on port[0] = 21
[  673.480265][T17250] IPVS: ftp: loaded support on port[0] = 21
[  673.581783][T17250] chnl_net:caif_netlink_parms(): no params data found
[  673.595277][T17248] chnl_net:caif_netlink_parms(): no params data found
[  673.642163][T17248] bridge0: port 1(bridge_slave_0) entered blocking state
[  673.649339][T17248] bridge0: port 1(bridge_slave_0) entered disabled state
[  673.657334][T17248] device bridge_slave_0 entered promiscuous mode
[  673.669984][T17250] bridge0: port 1(bridge_slave_0) entered blocking state
[  673.677075][T17250] bridge0: port 1(bridge_slave_0) entered disabled state
[  673.685195][T17250] device bridge_slave_0 entered promiscuous mode
[  673.693073][T17248] bridge0: port 2(bridge_slave_1) entered blocking state
[  673.700512][T17248] bridge0: port 2(bridge_slave_1) entered disabled state
[  673.708254][T17248] device bridge_slave_1 entered promiscuous mode
[  673.716487][T17250] bridge0: port 2(bridge_slave_1) entered blocking state
[  673.723666][T17250] bridge0: port 2(bridge_slave_1) entered disabled state
[  673.731596][T17250] device bridge_slave_1 entered promiscuous mode
[  673.756634][T17250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  673.767568][T17250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  673.895911][T17248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  673.905963][T17250] team0: Port device team_slave_0 added
[  673.912892][T17250] team0: Port device team_slave_1 added
[  673.921894][T17248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  673.961066][T17248] team0: Port device team_slave_0 added
[  674.022504][T17250] device hsr_slave_0 entered promiscuous mode
[  674.060209][T17250] device hsr_slave_1 entered promiscuous mode
[  674.100206][T17250] debugfs: Directory 'hsr0' with parent '/' already present!
[  674.108568][T17248] team0: Port device team_slave_1 added
[  674.128424][T17250] bridge0: port 2(bridge_slave_1) entered blocking state
[  674.135563][T17250] bridge0: port 2(bridge_slave_1) entered forwarding state
[  674.143812][T17250] bridge0: port 1(bridge_slave_0) entered blocking state
[  674.150930][T17250] bridge0: port 1(bridge_slave_0) entered forwarding state
[  674.222439][T17248] device hsr_slave_0 entered promiscuous mode
[  674.274037][T17248] device hsr_slave_1 entered promiscuous mode
[  674.323715][T17248] debugfs: Directory 'hsr0' with parent '/' already present!
[  674.360316][T17248] bridge0: port 2(bridge_slave_1) entered blocking state
[  674.367412][T17248] bridge0: port 2(bridge_slave_1) entered forwarding state
[  674.374746][T17248] bridge0: port 1(bridge_slave_0) entered blocking state
[  674.381792][T17248] bridge0: port 1(bridge_slave_0) entered forwarding state
[  674.409922][T17250] 8021q: adding VLAN 0 to HW filter on device bond0
[  674.430516][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  674.439377][ T2645] bridge0: port 1(bridge_slave_0) entered disabled state
[  674.447822][ T2645] bridge0: port 1(bridge_slave_0) entered disabled state
[  674.456382][ T2645] bridge0: port 2(bridge_slave_1) entered disabled state
[  674.465617][ T2645] bridge0: port 2(bridge_slave_1) entered disabled state
[  674.487610][T17250] 8021q: adding VLAN 0 to HW filter on device team0
[  674.520797][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  674.529619][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  674.539386][ T2645] bridge0: port 1(bridge_slave_0) entered blocking state
[  674.546503][ T2645] bridge0: port 1(bridge_slave_0) entered forwarding state
[  674.555653][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  674.565126][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  674.574182][ T2645] bridge0: port 2(bridge_slave_1) entered blocking state
[  674.581260][ T2645] bridge0: port 2(bridge_slave_1) entered forwarding state
[  674.589635][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  674.600551][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  674.609975][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  674.618789][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  674.634382][T17248] 8021q: adding VLAN 0 to HW filter on device bond0
[  674.645130][ T8071] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  674.653818][ T8071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  674.663031][ T8071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  674.681586][T17248] 8021q: adding VLAN 0 to HW filter on device team0
[  674.689594][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  674.698366][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  674.710547][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  674.718594][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  674.726823][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  674.736230][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  674.746063][T17250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  674.764011][ T8071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  674.774103][ T8071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  674.783613][ T8071] bridge0: port 1(bridge_slave_0) entered blocking state
[  674.790760][ T8071] bridge0: port 1(bridge_slave_0) entered forwarding state
[  674.799188][ T8071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  674.808053][ T8071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  674.816682][ T8071] bridge0: port 2(bridge_slave_1) entered blocking state
[  674.823916][ T8071] bridge0: port 2(bridge_slave_1) entered forwarding state
[  674.832036][ T8071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  674.841265][ T8071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  674.870204][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  674.878754][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  674.888057][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  674.897752][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  674.907366][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  674.916196][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  674.924745][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  674.933493][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  674.942519][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  674.952018][T17248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  674.974672][T10111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  674.982662][T10111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  674.993930][T17248] 8021q: adding VLAN 0 to HW filter on device batadv0
[  675.005079][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  675.016879][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  675.028282][T17250] 8021q: adding VLAN 0 to HW filter on device batadv0
13:49:32 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = dup3(r1, r2, 0x0)
dup2(r4, r3)

13:49:32 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = dup3(r1, r2, 0x0)
dup2(r4, r3)

13:49:32 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
pipe(&(0x7f00000003c0))
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x2000)=nil], &(0x7f00000001c0)=[0x1], &(0x7f0000000200), 0x0)

13:49:32 executing program 4:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
pipe(&(0x7f00000003c0))
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x2000)=nil], &(0x7f00000001c0)=[0x1], &(0x7f0000000200), 0x0)

13:49:32 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x0, 0x0)
r3 = dup(r2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

13:49:32 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x28}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0xf}, 0x48)

13:49:33 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = dup3(r1, r2, 0x0)
dup2(r4, r3)

13:49:33 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x0, 0x0)
r3 = dup(r2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

13:49:33 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x28}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0xf}, 0x48)

13:49:33 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/424]}, 0x220)

13:49:33 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r2)
ioctl$TUNSETIFF(r0, 0x894c, 0x0)

13:49:33 executing program 4:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
pipe(&(0x7f00000003c0))
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x2000)=nil], &(0x7f00000001c0)=[0x1], &(0x7f0000000200), 0x0)

13:49:33 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x28}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0xf}, 0x48)

13:49:33 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x182306})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

13:49:33 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/424]}, 0x220)

13:49:33 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x0, 0x0)
r3 = dup(r2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

13:49:33 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f00008b7ff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000000010100000006000000de0002000000100002000c00010005000100000000e2"], 0x24}}, 0x0)

13:49:33 executing program 1:
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x1)
signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8)
clock_gettime(0x0, &(0x7f0000000100)={0x0, <r2=>0x0})
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

13:49:33 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x28}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0xf}, 0x48)

13:49:33 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/424]}, 0x220)

[  676.840395][T17314] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
13:49:34 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, 0x0, 0x0)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
setpriority(0x0, r1, 0xffff)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000040)=@nullb='[d::],0::6:\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0)
dup(r0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

13:49:34 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x12, 0x2, 0x4, 0x8c8}, 0x3c)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000000)={r0, &(0x7f00000002c0)}, 0x1b)

13:49:34 executing program 0:
r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1005, 0x0)
ioctl$int_in(r0, 0x800060c0045005, &(0x7f00000000c0)=0x10)
read$alg(r0, &(0x7f0000000140)=""/229, 0x2000)

13:49:34 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x0, 0x0)
r3 = dup(r2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

13:49:34 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/424]}, 0x220)

13:49:34 executing program 5:
socketpair(0x0, 0x0, 0x400, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, 0x0, 0x200002, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x2, 0x3, 0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000040)='&@[\x00')
perf_event_open(&(0x7f0000001400)={0x0, 0x70, 0x7, 0x3f, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x0, 0x6, 0x3033, 0x0, 0x62f2, 0x800, 0x40, 0xc88e, 0x9, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0xafa, 0x8000, 0x1, 0x91, 0x635f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000140)=0x101)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000680)='&@[\x00')
perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x128c, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x0, 0x3, 0x83eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x7, 0x0, 0x1, 0x0, 0x7, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x20640, 0x0, 0xf1c, 0x0, 0xdcb1}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x1)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000100))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bcsh0\x00', @broadcast})
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/\xffrt\x98\x95\x19\x1e]\xff\xea\x10\x1b\x1d\xcco\x8f', 0x2761, 0x0)
socket$kcm(0x29, 0x2, 0x0)

13:49:34 executing program 4:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = semget$private(0x0, 0x0, 0x0)
semctl$GETNCNT(r1, 0x0, 0xe, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
request_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0xfffffffffffffff8)
r2 = socket(0x2, 0x3, 0x67)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c)
sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x5dc}, 0x6e)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000))
r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x6)
write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r3, 0x3, 0x0, 0x80000003)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x400, 0x0)
r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0)
r6 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000240)={0x5a, 0x3f, 0x66, 0x0, 0xe52, 0xff, 0x2d, 0x5, 0x0, 0x8, 0x0, 0xf9, 0x0, 0x6, 0x80, 0xd9, 0x1f, 0xe6, 0x81})
ioctl$VIDIOC_REQBUFS(r6, 0xc0585611, &(0x7f0000000080)={0x0, 0xb})
ioctl$DRM_IOCTL_FREE_BUFS(r6, 0x4010641a, &(0x7f0000000180)={0x9, &(0x7f0000000140)=[0x1f, 0xfffffffc, 0xa9c, 0x1, 0x1, 0x80, 0x5, 0x8f, 0x3ff]})
sendfile(r4, r5, 0x0, 0x7fffffff)
ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000200)={0x55, 0x1000, 0x5, {0x3f, 0x3}, {0x94a1, 0x6}, @period={0x5d, 0xcdc, 0x0, 0x5, 0xc7, {0x5ad8, 0x6, 0x7, 0x280}, 0x2, &(0x7f00000001c0)=[0x1, 0x81]}})

[  677.349059][ T8087] libceph: connect (1)[d::]:6789 error -101
[  677.367490][ T8087] libceph: mon0 (1)[d::]:6789 connect error
13:49:34 executing program 0:
openat$ashmem(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x4)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000540)=0x2000000000000074, 0x56c)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write(r0, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37)

13:49:34 executing program 2:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080))
syz_open_pts(r2, 0x0)
write(r1, &(0x7f00000001c0), 0xfffffef3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001740))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[  677.734597][   T26] audit: type=1804 audit(1573220974.809:240): pid=17359 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir318842142/syzkaller.nRSraq/188/file0" dev="sda1" ino=16747 res=1
[  677.783377][   T26] audit: type=1804 audit(1573220974.809:241): pid=17359 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir318842142/syzkaller.nRSraq/188/file0" dev="sda1" ino=16747 res=1
13:49:34 executing program 1:
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x1)
signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8)
clock_gettime(0x0, &(0x7f0000000100)={0x0, <r2=>0x0})
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

13:49:34 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071")
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x39, &(0x7f0000000040)={@local}, 0x20)

13:49:34 executing program 3:
perf_event_open(&(0x7f0000000180)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"])
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0c0583b, 0x20000001)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0xc0189436, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, <r4=>r3, 0x0, 0x1, &(0x7f0000000280)='\x00', 0xffffffffffffffff}, 0x30)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000440)='cgroup.type\x00')
write$cgroup_pid(r1, &(0x7f0000000100), 0xda4fff08)
ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000080)=0x1)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0)
r5 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0x1, 0x3, 0x4, 0x3f, 0x0, 0x5, 0x8a0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1f, 0x5, @perf_bp={&(0x7f0000000240), 0x7}, 0x20, 0x2, 0x0, 0x5, 0xff, 0x7ff, 0x5}, r5, 0x1, 0xffffffffffffffff, 0x7)
openat$cgroup_type(r1, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0)
openat$cgroup_int(r1, &(0x7f0000000040)='io.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0xf0, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)={0x0, r6}, 0x10)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x40286608, &(0x7f0000000180)={0x10, 0x70, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000003c0)=@in={0x2, 0x4e22, @multicast2}, 0x80, 0x0, 0x0, &(0x7f0000000540)=ANY=[]}, 0x0)
write$cgroup_int(r0, &(0x7f00000000c0), 0x1802a140)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x0, 0x0)

[  677.890286][   T26] audit: type=1804 audit(1573220974.959:243): pid=17359 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir318842142/syzkaller.nRSraq/188/file0" dev="sda1" ino=16747 res=1
[  678.021369][   T26] audit: type=1800 audit(1573220974.959:242): pid=17362 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16747 res=0
13:49:35 executing program 5:
socketpair(0x0, 0x0, 0x400, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, 0x0, 0x200002, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x2, 0x3, 0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000040)='&@[\x00')
perf_event_open(&(0x7f0000001400)={0x0, 0x70, 0x7, 0x3f, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x0, 0x6, 0x3033, 0x0, 0x62f2, 0x800, 0x40, 0xc88e, 0x9, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0xafa, 0x8000, 0x1, 0x91, 0x635f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000140)=0x101)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000680)='&@[\x00')
perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x128c, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x0, 0x3, 0x83eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x7, 0x0, 0x1, 0x0, 0x7, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x20640, 0x0, 0xf1c, 0x0, 0xdcb1}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x1)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000100))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bcsh0\x00', @broadcast})
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/\xffrt\x98\x95\x19\x1e]\xff\xea\x10\x1b\x1d\xcco\x8f', 0x2761, 0x0)
socket$kcm(0x29, 0x2, 0x0)

13:49:35 executing program 0:
openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$P9_RREADLINK(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x12b)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000)

13:49:35 executing program 4:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = semget$private(0x0, 0x0, 0x0)
semctl$GETNCNT(r1, 0x0, 0xe, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
request_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0xfffffffffffffff8)
r2 = socket(0x2, 0x3, 0x67)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c)
sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x5dc}, 0x6e)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000))
r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x6)
write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r3, 0x3, 0x0, 0x80000003)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x400, 0x0)
r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0)
r6 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000240)={0x5a, 0x3f, 0x66, 0x0, 0xe52, 0xff, 0x2d, 0x5, 0x0, 0x8, 0x0, 0xf9, 0x0, 0x6, 0x80, 0xd9, 0x1f, 0xe6, 0x81})
ioctl$VIDIOC_REQBUFS(r6, 0xc0585611, &(0x7f0000000080)={0x0, 0xb})
ioctl$DRM_IOCTL_FREE_BUFS(r6, 0x4010641a, &(0x7f0000000180)={0x9, &(0x7f0000000140)=[0x1f, 0xfffffffc, 0xa9c, 0x1, 0x1, 0x80, 0x5, 0x8f, 0x3ff]})
sendfile(r4, r5, 0x0, 0x7fffffff)
ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000200)={0x55, 0x1000, 0x5, {0x3f, 0x3}, {0x94a1, 0x6}, @period={0x5d, 0xcdc, 0x0, 0x5, 0xc7, {0x5ad8, 0x6, 0x7, 0x280}, 0x2, &(0x7f00000001c0)=[0x1, 0x81]}})

[  678.340326][ T8087] libceph: connect (1)[d::]:6789 error -101
[  678.346325][ T8087] libceph: mon0 (1)[d::]:6789 connect error
[  678.461754][T17374] EXT4-fs warning (device sda1): verify_group_input:123: Last group not full
[  678.506917][   T26] audit: type=1804 audit(1573220975.579:244): pid=17390 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir318842142/syzkaller.nRSraq/189/file0" dev="sda1" ino=16759 res=1
[  678.605560][   T26] audit: type=1804 audit(1573220975.599:245): pid=17390 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir318842142/syzkaller.nRSraq/189/file0" dev="sda1" ino=16759 res=1
[  678.695588][T17385] ==================================================================
[  678.703789][T17385] BUG: KCSAN: data-race in inode_sync_complete / other_inode_match
[  678.711675][T17385] 
[  678.714018][T17385] read to 0xffff888125aaece0 of 8 bytes by task 17371 on cpu 0:
[  678.721669][T17385]  other_inode_match+0x6b/0x5c0
[  678.727128][T17385]  find_inode_nowait+0x135/0x160
[  678.732080][T17385]  ext4_mark_iloc_dirty+0x12a8/0x1580
[  678.737470][T17385]  ext4_mark_inode_dirty+0xe9/0x420
[  678.742680][T17385]  ext4_dirty_inode+0x86/0xb0
[  678.747369][T17385]  __mark_inode_dirty+0x5d4/0x940
[  678.752408][T17385]  generic_write_end+0x1b7/0x1f0
[  678.757357][T17385]  ext4_da_write_end+0x158/0x620
[  678.762305][T17385]  generic_perform_write+0x1d3/0x320
[  678.764494][   T26] audit: type=1804 audit(1573220975.619:246): pid=17386 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir318842142/syzkaller.nRSraq/189/file0" dev="sda1" ino=16759 res=1
[  678.767602][T17385]  __generic_file_write_iter+0x251/0x380
[  678.767710][T17385]  ext4_file_write_iter+0x1bd/0xa00
[  678.802783][T17385]  new_sync_write+0x388/0x4a0
[  678.807478][T17385]  __vfs_write+0xb1/0xc0
[  678.811737][T17385]  vfs_write+0x18a/0x390
[  678.815995][T17385]  ksys_write+0xd5/0x1b0
[  678.820253][T17385]  __x64_sys_write+0x4c/0x60
[  678.824864][T17385]  do_syscall_64+0xcc/0x370
[  678.829384][T17385]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  678.835273][T17385] 
[  678.837616][T17385] write to 0xffff888125aaece0 of 8 bytes by task 17385 on cpu 1:
[  678.845358][T17385]  inode_sync_complete+0x3a/0x70
[  678.850315][T17385]  writeback_single_inode+0x293/0x310
[  678.855701][T17385]  sync_inode_metadata+0x74/0xa0
[  678.860657][T17385]  __generic_file_fsync+0x122/0x190
[  678.865870][T17385]  ext4_sync_file+0x48e/0xb00
[  678.870566][T17385]  vfs_fsync_range+0x82/0x150
[  678.875272][T17385]  ext4_file_write_iter+0x45b/0xa00
[  678.880494][T17385]  do_iter_readv_writev+0x487/0x5b0
[  678.885708][T17385]  do_iter_write+0x13b/0x3c0
[  678.890319][T17385]  vfs_iter_write+0x5c/0x80
[  678.894844][T17385]  iter_file_splice_write+0x4c0/0x7f0
[  678.900236][T17385]  direct_splice_actor+0xa0/0xc0
[  678.905189][T17385]  splice_direct_to_actor+0x215/0x510
[  678.910587][T17385]  do_splice_direct+0x161/0x1e0
[  678.915439][T17385]  do_sendfile+0x384/0x7f0
[  678.919869][T17385]  __x64_sys_sendfile64+0xbe/0x140
[  678.924997][T17385]  do_syscall_64+0xcc/0x370
[  678.929514][T17385]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  678.935394][T17385] 
[  678.937720][T17385] Reported by Kernel Concurrency Sanitizer on:
[  678.943870][T17385] CPU: 1 PID: 17385 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0
[  678.951764][T17385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  678.961816][T17385] ==================================================================
[  678.969870][T17385] Kernel panic - not syncing: panic_on_warn set ...
[  678.976472][T17385] CPU: 1 PID: 17385 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0
[  678.984373][T17385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  678.994437][T17385] Call Trace:
[  678.997737][T17385]  dump_stack+0xf5/0x159
[  679.001998][T17385]  panic+0x210/0x640
[  679.005898][T17385]  ? vprintk_func+0x8d/0x140
[  679.010508][T17385]  kcsan_report.cold+0xc/0xe
[  679.015128][T17385]  kcsan_setup_watchpoint+0x3fe/0x410
[  679.020511][T17385]  __tsan_unaligned_write8+0x143/0x1f0
[  679.025980][T17385]  inode_sync_complete+0x3a/0x70
[  679.030916][T17385]  writeback_single_inode+0x293/0x310
[  679.036291][T17385]  sync_inode_metadata+0x74/0xa0
[  679.041241][T17385]  __generic_file_fsync+0x122/0x190
[  679.046484][T17385]  ext4_sync_file+0x48e/0xb00
[  679.051178][T17385]  ? __read_once_size.constprop.0+0x20/0x20
[  679.057097][T17385]  vfs_fsync_range+0x82/0x150
[  679.061791][T17385]  ext4_file_write_iter+0x45b/0xa00
[  679.067006][T17385]  ? do_iter_readv_writev+0x2c0/0x5b0
[  679.072510][T17385]  do_iter_readv_writev+0x487/0x5b0
[  679.077739][T17385]  ? security_file_permission+0x88/0x280
[  679.083395][T17385]  do_iter_write+0x13b/0x3c0
[  679.087997][T17385]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  679.093916][T17385]  vfs_iter_write+0x5c/0x80
[  679.098531][T17385]  iter_file_splice_write+0x4c0/0x7f0
[  679.103929][T17385]  ? page_cache_pipe_buf_release+0x100/0x100
[  679.109916][T17385]  direct_splice_actor+0xa0/0xc0
[  679.114863][T17385]  splice_direct_to_actor+0x215/0x510
[  679.120249][T17385]  ? generic_pipe_buf_nosteal+0x20/0x20
[  679.125840][T17385]  do_splice_direct+0x161/0x1e0
[  679.130713][T17385]  do_sendfile+0x384/0x7f0
[  679.135145][T17385]  __x64_sys_sendfile64+0xbe/0x140
[  679.140269][T17385]  do_syscall_64+0xcc/0x370
[  679.144776][T17385]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  679.150664][T17385] RIP: 0033:0x45a219
[  679.154568][T17385] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  679.174173][T17385] RSP: 002b:00007fdb3af22c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  679.182585][T17385] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a219
[  679.190561][T17385] RDX: 0000000020000000 RSI: 0000000000000003 RDI: 0000000000000003
[  679.198529][T17385] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  679.206734][T17385] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007fdb3af236d4
[  679.214715][T17385] R13: 00000000004c7f94 R14: 00000000004de3b0 R15: 00000000ffffffff
[  679.224404][T17385] Kernel Offset: disabled
[  679.228749][T17385] Rebooting in 86400 seconds..