"0adc1f023c123f3188a070")
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lkad '], 0x1, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe)

01:20:50 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x8)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)

[  570.559475] encrypted_key: master key parameter '?1ˆ p' is invalid
01:20:50 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={<r3=>r1}, &(0x7f00000000c0)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000200)={0x0, 0xfffffffffffffff8}, 0x10)

[  570.635265] XFS (loop5): Invalid superblock magic number
01:20:50 executing program 2:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$VHOST_GET_FEATURES(r0, 0x805c4d65, &(0x7f0000000100))

01:20:50 executing program 4:
mkdir(&(0x7f0000000a40)='./file1/file0\x00', 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x400000, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000100)={<r1=>0x0, @in={{0x2, 0x4e20, @empty}}}, &(0x7f00000001c0)=0x84)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r1}, 0x0)
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000280)={'syz_tun\x00', {0x2, 0x4e22, @remote}})
mkdir(0x0, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5)
r5 = getpid()
sched_setscheduler(r5, 0x5, &(0x7f0000000040))
clock_gettime(0x0, 0x0)
syz_mount_image$btrfs(0x0, &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="335b18da61896e5a27d202584279dbf78545fc44570301717b9c3dd648e899fe09ef25c4e6a596c8421041b3c00801b176822eadd614b590affeb11b37eefb66bf5700049d6eab03bc1e1670af9b7a317b435cb91c0aea07851a8496d0f34d686e539640f64b4485544d05023da357b071b921707f3cde588ddd1d6ea14547afcb03b01a814ab8caac5c36c29ceacadea8fa3756a124012a341cd2ab224fb145c361abbf7e4f723344bd09c4ff1bf7975f3868e9"])
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000600)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000640)={{{@in=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000740)=0xe8)
lstat(&(0x7f0000000780)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
syz_mount_image$erofs(&(0x7f0000000340)='erofs\x00', &(0x7f0000000380)='./file1\x00', 0x4, 0x0, &(0x7f00000004c0), 0x2000000, &(0x7f0000000840)={[{@user_xattr='user_xattr'}, {@noacl='noacl'}, {@fault_injection={'fault_injection', 0x3d, 0x6}}], [{@subj_type={'subj_type', 0x3d, 'ntfs\x00'}}, {@subj_user={'subj_user', 0x3d, '/vboxnet0&'}}, {@subj_type={'subj_type'}}, {@fowner_lt={'fowner<', r6}}, {@euid_eq={'euid', 0x3d, r7}}, {@euid_eq={'euid', 0x3d, r8}}, {@fsname={'fsname', 0x3d, 'bfs\x00'}}]})
syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2000, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
syz_genetlink_get_family_id$ipvs(0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
recvfrom$llc(r9, &(0x7f0000000940)=""/230, 0xe6, 0x0, &(0x7f00000004c0)={0x1a, 0x0, 0x6, 0x2520, 0x4, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x10)
syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb846000000dc", 0xa}], 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000001280)='/dev/audio\x00', 0x2043, 0x0)
bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x2, 0x1a}, 0x20)

01:20:50 executing program 3:
mkdir(&(0x7f0000000a40)='./file1/file0\x00', 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x400000, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000100)={<r1=>0x0, @in={{0x2, 0x4e20, @empty}}}, &(0x7f00000001c0)=0x84)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r1}, 0x0)
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000280)={'syz_tun\x00', {0x2, 0x4e22, @remote}})
mkdir(0x0, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5)
r5 = getpid()
sched_setscheduler(r5, 0x5, &(0x7f0000000040))
clock_gettime(0x0, 0x0)
syz_mount_image$btrfs(0x0, &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="335b18da61896e5a27d202584279dbf78545fc44570301717b9c3dd648e899fe09ef25c4e6a596c8421041b3c00801b176822eadd614b590affeb11b37eefb66bf5700049d6eab03bc1e1670af9b7a317b435cb91c0aea07851a8496d0f34d686e539640f64b4485544d05023da357b071b921707f3cde588ddd1d6ea14547afcb03b01a814ab8caac5c36c29ceacadea8fa3756a124012a341cd2ab224fb145c361abbf7e4f723344bd09c4ff1bf7975f3868e9"])
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000600)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000640)={{{@in=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000740)=0xe8)
lstat(&(0x7f0000000780)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
syz_mount_image$erofs(&(0x7f0000000340)='erofs\x00', &(0x7f0000000380)='./file1\x00', 0x4, 0x0, &(0x7f00000004c0), 0x2000000, &(0x7f0000000840)={[{@user_xattr='user_xattr'}, {@noacl='noacl'}, {@fault_injection={'fault_injection', 0x3d, 0x6}}], [{@subj_type={'subj_type', 0x3d, 'ntfs\x00'}}, {@subj_user={'subj_user', 0x3d, '/vboxnet0&'}}, {@subj_type={'subj_type'}}, {@fowner_lt={'fowner<', r6}}, {@euid_eq={'euid', 0x3d, r7}}, {@euid_eq={'euid', 0x3d, r8}}, {@fsname={'fsname', 0x3d, 'bfs\x00'}}]})
syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2000, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
syz_genetlink_get_family_id$ipvs(0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
recvfrom$llc(r9, &(0x7f0000000940)=""/230, 0xe6, 0x0, &(0x7f00000004c0)={0x1a, 0x0, 0x6, 0x2520, 0x4, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x10)
syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb846000000dc", 0xa}], 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000001280)='/dev/audio\x00', 0x2043, 0x0)
bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x2, 0x1a}, 0x20)

01:20:50 executing program 5:
r0 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000)
r2 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e21, @multicast2}, 0x235, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)='bridge0\x00', 0x4, 0x5, 0x9})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080))
fremovexattr(0xffffffffffffffff, 0x0)
r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0xfffffffffffffffc, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000400)={0x0, 'veth1_to_team\x00'}, 0x18)
ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000000c0))
bind$can_raw(r0, &(0x7f0000000140), 0x10)
getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2)
getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000640))
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in6=@ipv4}}, &(0x7f0000000780)=0xe8)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
mmap$binder(&(0x7f000003e000/0x2000)=nil, 0x2000, 0x0, 0x10, r4, 0x402)
r5 = semget(0xffffffffffffffff, 0x2, 0x40)
semctl$SEM_STAT(r5, 0x4, 0x12, &(0x7f00000008c0)=""/210)
sync()
renameat2(r4, &(0x7f0000000280)='./file0\x00', r2, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff)
ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f00000004c0)=0x19)
syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={[{@pquota='pquota'}]})

01:20:50 executing program 2:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$VHOST_GET_FEATURES(r0, 0x805c4d65, &(0x7f0000000100))

01:20:50 executing program 4:
mkdir(&(0x7f0000000a40)='./file1/file0\x00', 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x400000, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000100)={<r1=>0x0, @in={{0x2, 0x4e20, @empty}}}, &(0x7f00000001c0)=0x84)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r1}, 0x0)
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000280)={'syz_tun\x00', {0x2, 0x4e22, @remote}})
mkdir(0x0, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5)
r5 = getpid()
sched_setscheduler(r5, 0x5, &(0x7f0000000040))
clock_gettime(0x0, 0x0)
syz_mount_image$btrfs(0x0, &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="335b18da61896e5a27d202584279dbf78545fc44570301717b9c3dd648e899fe09ef25c4e6a596c8421041b3c00801b176822eadd614b590affeb11b37eefb66bf5700049d6eab03bc1e1670af9b7a317b435cb91c0aea07851a8496d0f34d686e539640f64b4485544d05023da357b071b921707f3cde588ddd1d6ea14547afcb03b01a814ab8caac5c36c29ceacadea8fa3756a124012a341cd2ab224fb145c361abbf7e4f723344bd09c4ff1bf7975f3868e9"])
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000600)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000640)={{{@in=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000740)=0xe8)
lstat(&(0x7f0000000780)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
syz_mount_image$erofs(&(0x7f0000000340)='erofs\x00', &(0x7f0000000380)='./file1\x00', 0x4, 0x0, &(0x7f00000004c0), 0x2000000, &(0x7f0000000840)={[{@user_xattr='user_xattr'}, {@noacl='noacl'}, {@fault_injection={'fault_injection', 0x3d, 0x6}}], [{@subj_type={'subj_type', 0x3d, 'ntfs\x00'}}, {@subj_user={'subj_user', 0x3d, '/vboxnet0&'}}, {@subj_type={'subj_type'}}, {@fowner_lt={'fowner<', r6}}, {@euid_eq={'euid', 0x3d, r7}}, {@euid_eq={'euid', 0x3d, r8}}, {@fsname={'fsname', 0x3d, 'bfs\x00'}}]})
syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2000, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
syz_genetlink_get_family_id$ipvs(0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
recvfrom$llc(r9, &(0x7f0000000940)=""/230, 0xe6, 0x0, &(0x7f00000004c0)={0x1a, 0x0, 0x6, 0x2520, 0x4, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x10)
syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb846000000dc", 0xa}], 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000001280)='/dev/audio\x00', 0x2043, 0x0)
bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x2, 0x1a}, 0x20)

01:20:50 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x8)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)

01:20:51 executing program 2:
mkdir(&(0x7f0000000a40)='./file1/file0\x00', 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x400000, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000100)={<r1=>0x0, @in={{0x2, 0x4e20, @empty}}}, &(0x7f00000001c0)=0x84)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r1}, 0x0)
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000280)={'syz_tun\x00', {0x2, 0x4e22, @remote}})
mkdir(0x0, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5)
r5 = getpid()
sched_setscheduler(r5, 0x5, &(0x7f0000000040))
clock_gettime(0x0, 0x0)
syz_mount_image$btrfs(0x0, &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="335b18da61896e5a27d202584279dbf78545fc44570301717b9c3dd648e899fe09ef25c4e6a596c8421041b3c00801b176822eadd614b590affeb11b37eefb66bf5700049d6eab03bc1e1670af9b7a317b435cb91c0aea07851a8496d0f34d686e539640f64b4485544d05023da357b071b921707f3cde588ddd1d6ea14547afcb03b01a814ab8caac5c36c29ceacadea8fa3756a124012a341cd2ab224fb145c361abbf7e4f723344bd09c4ff1bf7975f3868e9"])
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000600)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000640)={{{@in=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000740)=0xe8)
lstat(&(0x7f0000000780)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
syz_mount_image$erofs(&(0x7f0000000340)='erofs\x00', &(0x7f0000000380)='./file1\x00', 0x4, 0x0, &(0x7f00000004c0), 0x2000000, &(0x7f0000000840)={[{@user_xattr='user_xattr'}, {@noacl='noacl'}, {@fault_injection={'fault_injection', 0x3d, 0x6}}], [{@subj_type={'subj_type', 0x3d, 'ntfs\x00'}}, {@subj_user={'subj_user', 0x3d, '/vboxnet0&'}}, {@subj_type={'subj_type'}}, {@fowner_lt={'fowner<', r6}}, {@euid_eq={'euid', 0x3d, r7}}, {@euid_eq={'euid', 0x3d, r8}}, {@fsname={'fsname', 0x3d, 'bfs\x00'}}]})
syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2000, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
syz_genetlink_get_family_id$ipvs(0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
recvfrom$llc(r9, &(0x7f0000000940)=""/230, 0xe6, 0x0, &(0x7f00000004c0)={0x1a, 0x0, 0x6, 0x2520, 0x4, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x10)
syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb846000000dc", 0xa}], 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000001280)='/dev/audio\x00', 0x2043, 0x0)
bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x2, 0x1a}, 0x20)

[  571.431480] XFS (loop5): Invalid superblock magic number
01:20:51 executing program 4:
mkdir(&(0x7f0000000a40)='./file1/file0\x00', 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x400000, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000100)={<r1=>0x0, @in={{0x2, 0x4e20, @empty}}}, &(0x7f00000001c0)=0x84)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r1}, 0x0)
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000280)={'syz_tun\x00', {0x2, 0x4e22, @remote}})
mkdir(0x0, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5)
r5 = getpid()
sched_setscheduler(r5, 0x5, &(0x7f0000000040))
clock_gettime(0x0, 0x0)
syz_mount_image$btrfs(0x0, &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="335b18da61896e5a27d202584279dbf78545fc44570301717b9c3dd648e899fe09ef25c4e6a596c8421041b3c00801b176822eadd614b590affeb11b37eefb66bf5700049d6eab03bc1e1670af9b7a317b435cb91c0aea07851a8496d0f34d686e539640f64b4485544d05023da357b071b921707f3cde588ddd1d6ea14547afcb03b01a814ab8caac5c36c29ceacadea8fa3756a124012a341cd2ab224fb145c361abbf7e4f723344bd09c4ff1bf7975f3868e9"])
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000600)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000640)={{{@in=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000740)=0xe8)
lstat(&(0x7f0000000780)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
syz_mount_image$erofs(&(0x7f0000000340)='erofs\x00', &(0x7f0000000380)='./file1\x00', 0x4, 0x0, &(0x7f00000004c0), 0x2000000, &(0x7f0000000840)={[{@user_xattr='user_xattr'}, {@noacl='noacl'}, {@fault_injection={'fault_injection', 0x3d, 0x6}}], [{@subj_type={'subj_type', 0x3d, 'ntfs\x00'}}, {@subj_user={'subj_user', 0x3d, '/vboxnet0&'}}, {@subj_type={'subj_type'}}, {@fowner_lt={'fowner<', r6}}, {@euid_eq={'euid', 0x3d, r7}}, {@euid_eq={'euid', 0x3d, r8}}, {@fsname={'fsname', 0x3d, 'bfs\x00'}}]})
syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2000, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
syz_genetlink_get_family_id$ipvs(0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
recvfrom$llc(r9, &(0x7f0000000940)=""/230, 0xe6, 0x0, &(0x7f00000004c0)={0x1a, 0x0, 0x6, 0x2520, 0x4, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x10)
syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb846000000dc", 0xa}], 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000001280)='/dev/audio\x00', 0x2043, 0x0)
bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x2, 0x1a}, 0x20)

01:20:51 executing program 1:
mkdir(&(0x7f0000000a40)='./file1/file0\x00', 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x400000, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000100)={<r1=>0x0, @in={{0x2, 0x4e20, @empty}}}, &(0x7f00000001c0)=0x84)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r1}, 0x0)
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000280)={'syz_tun\x00', {0x2, 0x4e22, @remote}})
mkdir(0x0, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5)
r5 = getpid()
sched_setscheduler(r5, 0x5, &(0x7f0000000040))
clock_gettime(0x0, 0x0)
syz_mount_image$btrfs(0x0, &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="335b18da61896e5a27d202584279dbf78545fc44570301717b9c3dd648e899fe09ef25c4e6a596c8421041b3c00801b176822eadd614b590affeb11b37eefb66bf5700049d6eab03bc1e1670af9b7a317b435cb91c0aea07851a8496d0f34d686e539640f64b4485544d05023da357b071b921707f3cde588ddd1d6ea14547afcb03b01a814ab8caac5c36c29ceacadea8fa3756a124012a341cd2ab224fb145c361abbf7e4f723344bd09c4ff1bf7975f3868e9"])
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000600)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000640)={{{@in=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000740)=0xe8)
lstat(&(0x7f0000000780)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
syz_mount_image$erofs(&(0x7f0000000340)='erofs\x00', &(0x7f0000000380)='./file1\x00', 0x4, 0x0, &(0x7f00000004c0), 0x2000000, &(0x7f0000000840)={[{@user_xattr='user_xattr'}, {@noacl='noacl'}, {@fault_injection={'fault_injection', 0x3d, 0x6}}], [{@subj_type={'subj_type', 0x3d, 'ntfs\x00'}}, {@subj_user={'subj_user', 0x3d, '/vboxnet0&'}}, {@subj_type={'subj_type'}}, {@fowner_lt={'fowner<', r6}}, {@euid_eq={'euid', 0x3d, r7}}, {@euid_eq={'euid', 0x3d, r8}}, {@fsname={'fsname', 0x3d, 'bfs\x00'}}]})
syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2000, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
syz_genetlink_get_family_id$ipvs(0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
recvfrom$llc(r9, &(0x7f0000000940)=""/230, 0xe6, 0x0, &(0x7f00000004c0)={0x1a, 0x0, 0x6, 0x2520, 0x4, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x10)
syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb846000000dc", 0xa}], 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000001280)='/dev/audio\x00', 0x2043, 0x0)
bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x2, 0x1a}, 0x20)

[  571.634256] erofs: read_super, device -> /dev/loop2
[  571.666337] erofs: options -> user_xattr,noacl,fault_injection=0x0000000000000006,subj_type=ntfs
01:20:51 executing program 3:
mkdir(&(0x7f0000000a40)='./file1/file0\x00', 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x400000, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000100)={<r1=>0x0, @in={{0x2, 0x4e20, @empty}}}, &(0x7f00000001c0)=0x84)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r1}, 0x0)
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000280)={'syz_tun\x00', {0x2, 0x4e22, @remote}})
mkdir(0x0, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5)
r5 = getpid()
sched_setscheduler(r5, 0x5, &(0x7f0000000040))
clock_gettime(0x0, 0x0)
syz_mount_image$btrfs(0x0, &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="335b18da61896e5a27d202584279dbf78545fc44570301717b9c3dd648e899fe09ef25c4e6a596c8421041b3c00801b176822eadd614b590affeb11b37eefb66bf5700049d6eab03bc1e1670af9b7a317b435cb91c0aea07851a8496d0f34d686e539640f64b4485544d05023da357b071b921707f3cde588ddd1d6ea14547afcb03b01a814ab8caac5c36c29ceacadea8fa3756a124012a341cd2ab224fb145c361abbf7e4f723344bd09c4ff1bf7975f3868e9"])
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000600)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000640)={{{@in=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000740)=0xe8)
lstat(&(0x7f0000000780)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
syz_mount_image$erofs(&(0x7f0000000340)='erofs\x00', &(0x7f0000000380)='./file1\x00', 0x4, 0x0, &(0x7f00000004c0), 0x2000000, &(0x7f0000000840)={[{@user_xattr='user_xattr'}, {@noacl='noacl'}, {@fault_injection={'fault_injection', 0x3d, 0x6}}], [{@subj_type={'subj_type', 0x3d, 'ntfs\x00'}}, {@subj_user={'subj_user', 0x3d, '/vboxnet0&'}}, {@subj_type={'subj_type'}}, {@fowner_lt={'fowner<', r6}}, {@euid_eq={'euid', 0x3d, r7}}, {@euid_eq={'euid', 0x3d, r8}}, {@fsname={'fsname', 0x3d, 'bfs\x00'}}]})
syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2000, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
syz_genetlink_get_family_id$ipvs(0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
recvfrom$llc(r9, &(0x7f0000000940)=""/230, 0xe6, 0x0, &(0x7f00000004c0)={0x1a, 0x0, 0x6, 0x2520, 0x4, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x10)
syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb846000000dc", 0xa}], 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000001280)='/dev/audio\x00', 0x2043, 0x0)
bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x2, 0x1a}, 0x20)

[  571.762368] erofs: cannot find valid erofs superblock
[  571.961882] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
01:20:51 executing program 4:
r0 = socket$inet(0x2, 0x6, 0x0)
setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, 0x0, 0x3b9)

01:20:51 executing program 1:
mkdir(&(0x7f0000000a40)='./file1/file0\x00', 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x400000, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000100)={<r1=>0x0, @in={{0x2, 0x4e20, @empty}}}, &(0x7f00000001c0)=0x84)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r1}, 0x0)
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000280)={'syz_tun\x00', {0x2, 0x4e22, @remote}})
mkdir(0x0, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5)
r5 = getpid()
sched_setscheduler(r5, 0x5, &(0x7f0000000040))
clock_gettime(0x0, 0x0)
syz_mount_image$btrfs(0x0, &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="335b18da61896e5a27d202584279dbf78545fc44570301717b9c3dd648e899fe09ef25c4e6a596c8421041b3c00801b176822eadd614b590affeb11b37eefb66bf5700049d6eab03bc1e1670af9b7a317b435cb91c0aea07851a8496d0f34d686e539640f64b4485544d05023da357b071b921707f3cde588ddd1d6ea14547afcb03b01a814ab8caac5c36c29ceacadea8fa3756a124012a341cd2ab224fb145c361abbf7e4f723344bd09c4ff1bf7975f3868e9"])
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000600)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000640)={{{@in=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000740)=0xe8)
lstat(&(0x7f0000000780)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
syz_mount_image$erofs(&(0x7f0000000340)='erofs\x00', &(0x7f0000000380)='./file1\x00', 0x4, 0x0, &(0x7f00000004c0), 0x2000000, &(0x7f0000000840)={[{@user_xattr='user_xattr'}, {@noacl='noacl'}, {@fault_injection={'fault_injection', 0x3d, 0x6}}], [{@subj_type={'subj_type', 0x3d, 'ntfs\x00'}}, {@subj_user={'subj_user', 0x3d, '/vboxnet0&'}}, {@subj_type={'subj_type'}}, {@fowner_lt={'fowner<', r6}}, {@euid_eq={'euid', 0x3d, r7}}, {@euid_eq={'euid', 0x3d, r8}}, {@fsname={'fsname', 0x3d, 'bfs\x00'}}]})
syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2000, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
syz_genetlink_get_family_id$ipvs(0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
recvfrom$llc(r9, &(0x7f0000000940)=""/230, 0xe6, 0x0, &(0x7f00000004c0)={0x1a, 0x0, 0x6, 0x2520, 0x4, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x10)
syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb846000000dc", 0xa}], 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000001280)='/dev/audio\x00', 0x2043, 0x0)
bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x2, 0x1a}, 0x20)

01:20:51 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x8)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)

01:20:52 executing program 5:
socket$bt_cmtp(0x1f, 0x3, 0x5)
getsockopt(0xffffffffffffffff, 0x7fff, 0x0, 0x0, &(0x7f00000002c0))
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x0)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x80045510, &(0x7f0000000040)={0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000300))
r1 = socket(0x10, 0x3, 0xa)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\xd4\x00\x04*\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\xf5\xe9J\xae\"\xe8\x9b\xb3l\xc7Ez\xcc\xc32\fg\xa9\x0fy\x80XC\xe9\x01\xd2\xdau\xaf\x1f\x00\x00\x00\x00\x00\x00\x00\x00E\xccaX\xf01R\x88D \x9c~\xd0[\x16\x0e\xf36r\x1b\xf8\x96\x86\xffG/q\xdf\xcaSS\xf62=\xdf\x80\x06\xff\xc1\x05-j\x80\x98Z\xdch\x01ped\x8b5\xc7\xd3!\xfc\\\x04f\x06/\xbf\xadZ\xcb\xe7\xffl\xef\xe5<\x88\xc0Z\xb9p\xce\xeb\xdf\xa5\x89\t\x8a\xd4\r\b\r\xeb$\x88\xf9\xe4\x06\x96\x82\xb1D\x83\xf1\x13\xcbiy\xb2\xf3\x90\x17\x9a\x18\xe2k@\x88\xf1\xf3\x1e\xd0J\nh\x1f\x00.\x00t6\x94tu\xab\a7\x11\xc9\x8a\xe3\xb4%\x9f\x1a\x1a\xff\x9b\t\xaaf\xcb\x90\xcaC\xa1\xdb\xc6\xde\x15\xab\xb4\xaes\x9f\x9e\x8f\x04|\xd2\x9e\xc7k\x9e\xf6\xbe\xb7\x83\x9f\x80q\xaa\xeaM$~j\x95\x14t\x8c\x93\xd0\xbb\x01\xa7\xc3|\xa6\xc8V2z\xf8\x1f)m,,\a\xc2\xd6;')
sendfile(r1, r2, &(0x7f0000000040)=0x100000, 0xfffffffe)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0)

01:20:52 executing program 3:
mkdir(&(0x7f0000000a40)='./file1/file0\x00', 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x400000, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000100)={<r1=>0x0, @in={{0x2, 0x4e20, @empty}}}, &(0x7f00000001c0)=0x84)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r1}, 0x0)
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000280)={'syz_tun\x00', {0x2, 0x4e22, @remote}})
mkdir(0x0, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5)
r5 = getpid()
sched_setscheduler(r5, 0x5, &(0x7f0000000040))
clock_gettime(0x0, 0x0)
syz_mount_image$btrfs(0x0, &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="335b18da61896e5a27d202584279dbf78545fc44570301717b9c3dd648e899fe09ef25c4e6a596c8421041b3c00801b176822eadd614b590affeb11b37eefb66bf5700049d6eab03bc1e1670af9b7a317b435cb91c0aea07851a8496d0f34d686e539640f64b4485544d05023da357b071b921707f3cde588ddd1d6ea14547afcb03b01a814ab8caac5c36c29ceacadea8fa3756a124012a341cd2ab224fb145c361abbf7e4f723344bd09c4ff1bf7975f3868e9"])
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000600)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000640)={{{@in=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000740)=0xe8)
lstat(&(0x7f0000000780)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
syz_mount_image$erofs(&(0x7f0000000340)='erofs\x00', &(0x7f0000000380)='./file1\x00', 0x4, 0x0, &(0x7f00000004c0), 0x2000000, &(0x7f0000000840)={[{@user_xattr='user_xattr'}, {@noacl='noacl'}, {@fault_injection={'fault_injection', 0x3d, 0x6}}], [{@subj_type={'subj_type', 0x3d, 'ntfs\x00'}}, {@subj_user={'subj_user', 0x3d, '/vboxnet0&'}}, {@subj_type={'subj_type'}}, {@fowner_lt={'fowner<', r6}}, {@euid_eq={'euid', 0x3d, r7}}, {@euid_eq={'euid', 0x3d, r8}}, {@fsname={'fsname', 0x3d, 'bfs\x00'}}]})
syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2000, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
syz_genetlink_get_family_id$ipvs(0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
recvfrom$llc(r9, &(0x7f0000000940)=""/230, 0xe6, 0x0, &(0x7f00000004c0)={0x1a, 0x0, 0x6, 0x2520, 0x4, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x10)
syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb846000000dc", 0xa}], 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000001280)='/dev/audio\x00', 0x2043, 0x0)
bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x2, 0x1a}, 0x20)

01:20:52 executing program 2:
mkdir(&(0x7f0000000a40)='./file1/file0\x00', 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x400000, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000100)={<r1=>0x0, @in={{0x2, 0x4e20, @empty}}}, &(0x7f00000001c0)=0x84)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r1}, 0x0)
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000280)={'syz_tun\x00', {0x2, 0x4e22, @remote}})
mkdir(0x0, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5)
r5 = getpid()
sched_setscheduler(r5, 0x5, &(0x7f0000000040))
clock_gettime(0x0, 0x0)
syz_mount_image$btrfs(0x0, &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="335b18da61896e5a27d202584279dbf78545fc44570301717b9c3dd648e899fe09ef25c4e6a596c8421041b3c00801b176822eadd614b590affeb11b37eefb66bf5700049d6eab03bc1e1670af9b7a317b435cb91c0aea07851a8496d0f34d686e539640f64b4485544d05023da357b071b921707f3cde588ddd1d6ea14547afcb03b01a814ab8caac5c36c29ceacadea8fa3756a124012a341cd2ab224fb145c361abbf7e4f723344bd09c4ff1bf7975f3868e9"])
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000600)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000640)={{{@in=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000740)=0xe8)
lstat(&(0x7f0000000780)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
syz_mount_image$erofs(&(0x7f0000000340)='erofs\x00', &(0x7f0000000380)='./file1\x00', 0x4, 0x0, &(0x7f00000004c0), 0x2000000, &(0x7f0000000840)={[{@user_xattr='user_xattr'}, {@noacl='noacl'}, {@fault_injection={'fault_injection', 0x3d, 0x6}}], [{@subj_type={'subj_type', 0x3d, 'ntfs\x00'}}, {@subj_user={'subj_user', 0x3d, '/vboxnet0&'}}, {@subj_type={'subj_type'}}, {@fowner_lt={'fowner<', r6}}, {@euid_eq={'euid', 0x3d, r7}}, {@euid_eq={'euid', 0x3d, r8}}, {@fsname={'fsname', 0x3d, 'bfs\x00'}}]})
syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2000, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
syz_genetlink_get_family_id$ipvs(0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
recvfrom$llc(r9, &(0x7f0000000940)=""/230, 0xe6, 0x0, &(0x7f00000004c0)={0x1a, 0x0, 0x6, 0x2520, 0x4, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x10)
syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb846000000dc", 0xa}], 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000001280)='/dev/audio\x00', 0x2043, 0x0)
bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x2, 0x1a}, 0x20)

01:20:52 executing program 4:
r0 = socket$inet(0x2, 0x6, 0x0)
setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, 0x0, 0x3b9)

01:20:52 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f00000002c0))

01:20:52 executing program 4:
r0 = socket$inet(0x2, 0x6, 0x0)
setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, 0x0, 0x3b9)

01:20:52 executing program 4:
r0 = socket$inet(0x2, 0x6, 0x0)
setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, 0x0, 0x3b9)

[  572.888804] erofs: read_super, device -> /dev/loop2
[  572.944093] erofs: options -> user_xattr,noacl,fault_injection=0x0000000000000006,subj_type=ntfs
01:20:52 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r3, &(0x7f0000000fc0)=""/4096, 0x1000, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000cc0)="7589f0da892457ee3604b3303d1176a13baaebcab9eba210a07246127b486e98e3029104796460b1dfef95b0368b0b19c338b1306db81cea8edfc66a6212607f01496a9963ef1a83caee01bd72e85c40dd287a1055ca6b801959badb1253ae3a85a47b0ec39b760f063d4756614fc1d3e68b9f4f32be2652ce67d2e776b433331ad58b9d70c0f258e00b9d56ff7ecb14e6050c70da00c5006b8cffd8f169f2861e2df3efe13056d1babf3dde7a2a1a5cc8cb207e10f61e215d2935a43c0db2cef01e23933c", 0xc5, 0x0, 0x0, 0x0)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xffffff60)
splice(r1, 0x0, r3, 0x0, 0x10003, 0x0)
connect(r4, &(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80)

[  573.024116] erofs: cannot find valid erofs superblock
01:20:52 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x8)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)

01:20:53 executing program 1:
mkdir(&(0x7f0000000a40)='./file1/file0\x00', 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x400000, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000100)={<r1=>0x0, @in={{0x2, 0x4e20, @empty}}}, &(0x7f00000001c0)=0x84)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r1}, 0x0)
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000002340)=ANY=[@ANYBLOB="0e00000000000000060100102ef62c255aaabbfa44fa285ab718b3b3832a47c81a371081480b02ba28377449e0ef39c7a005eda0a30f97a6136cce8bbae7c47038bddbc3524f9e58bf10d1583e6ed997113c7407d2678973842e2afea90cd8c33ed53a38c5a9d7daa37853069ffc749471407e6793449c44aa900f1d000233910bd171329837cdac175a304330996861b375c04119e363ea771bcc36961ac4c9ce15acf3f70ceb69ef7c341fe0a42ce2498610856796cfe77d9058eb16ce0f02f6a12012d6883620ab257b291c5881731dbeb5c297eb93082a66b07338fb59386ceb3a238bc9087eb59bbbd6279c9087be1ee879dabd09d1e310eb453e27de1a00298eb07449098ed29ebb217a979f2cd9ef6c102c2cb1ef0276b0bba662ef8813c45f7f127945bbd2032a85ae33f36df93f010d8acb7eb056da934f11a5e69533bf31b684df7684e8cf260d9b943c6063901524cee55c2705e2ca9e018fdb954e875c8db2c088cce0a693897eb3542eb12edc1c991f948f68b4daff84cba1a19af260c42c23dcbd3c1392fcd59c9a7351033ce08ba82d526377d0c9e557d06a2e0eabecef9bda4af7ce55392f07c2977a3b7c1acdb09eb47ea2c6991ed74c8f99c72707f797db4eff24ca4de57612932c68e8a407d1f5d23ae044c8754c285a6f252a9c848ee019af7f6bf7c5f4a9cecf71df23a097ce15bdde447592de7f72d415c249d0c02ec408114e51d76dbccc6297c95f587079a92b7cdb740786b22a5f6d2add34ad4cc154dd464e8459e3cf92a7f7749503f3e314ef010bd2f7bbc7825e6a6b5cfd8e2cacfe023fa62a84ad103d0e193afb87d7859326cf728159a7f8942eb435400981a188db1b40e4945a17b3c67c6e66c1b024279cdabdc7dcfdbaefbe9342a7889203d3c4caef290b9e4ce39a0cd3302dc68f2f2901ed6234d00f37bfefe1a7a3157e54780e5f7921ccfe4608cb006cb47442c3a58b422cd1a96695926cbdcf172eba4c93db86de0e42cb5018071e649e9b81dcd47e0c2c6b247461deaddbcf3066447fe77857357bb6011289bd77e37c64d62f8c00be91f2fd2519bec0c8f8e49a29e0a0a7ab5460fc6520e6b701a3ae076c1f683d70a0e8e5e9ba183c7c16263c41170fe39f6d3626625bc7634a1fe86f4d1de5c4032014b9f72e377f33bdd1f9d2eee3e30106aa3c846b868c3fa1f608901245e6a527a7dd3bf32a689804b14415d2e832144e5b84b6c8f9a089941bcd96ed430e19094aa73375ae67cf3af0a64d31985a2b0e60d554c701d83f17e24a49b2bf501939e11ffa7064455195748b5106d02cd3d29e12543d690431c83fdc44ef050daa4ab29a377c2f48d10e615834f3f607d12e32373406b030db5bde28511899710a1868eb8b5822a07e27290a26e284fd3409cc3149dce97a1d56df5a326f258ab4e509d52037b360963287ce417f61588c1cfc664e598f1fec92c0bbefa7d01faee1db327ae4698c530e3e143b7751e4b05b35e273aca240c2c1cff729931fd82eeb56049532bcff0c10e4ecfa82e265894bd5ada9534875353d7d00bddb003135d8bbb53e12601c2371bebc83fece12483cf00735ac6cd49415df264b9b841392827939b86414bbf466da6a52efd112a1c001bf3c3669917cbf3cfb7944ec60dd8978cb3251562e853d1922f173376c605648fa5af6f83ccae5bb44fdd35f7725670053489546eba6b9a35a1c288460245d102e089d3ddf6df9aa3c16fbcff3c2c0ecc679db8f4333af1fa8187a2338beedb275bebc86e830ad512af78917550c6bc9bb12f17ffff871ceeeb9ab90f189faeed4d58dec28a259d712106e510abf21ae69241e71beda38269c41ceb512eafefae251de83050d2fe2bc2168e37559123ae3be42dd098442a9484e5e0ed5da4074147c78af20d63b9ce5aa8c74df8aa30a9575a237e39f15de24ab123cfc9755bf73b6e2c0678942dafc2c24e7b4fb03552d844cd2a915ab24c3c6b9d2aa75ed49dc83d74c8308114b9e6d72048a09cff880f2f022d64e4eb80eea5c28ee6687c6fd36b8de95cf7c46aa343659dc94083484ee845f91407c29d116e60573c681ecb61b4135cf7fc1873a485f379d696f0544a4b7040d1a5d9ff86eae56fb012296408d7bb4ce5a15f9685bd7cb3c729f0dace52202d87ea439a330c7b6ea27aa7e1ef97bf5b0c7374e13debfb83b3c3b94255005d6be3604b20c0506752238f259e270d44e4d1ab86177b4db3fc02a53ea863b737f022c363a099fa565177f254384bfa8bdfa5f649cdbb874e8c2bbe315954c30d945535d09de650be500fb870958ef05c123755fd0cdcc7b31eade73883a58206e1375c75616747e09981031e6c8d9268d956be5a34e56e6920196ccf2de0f3fd75994edfe45204fd88dd6de7da2d33a655814cb4e76eaea8e5dc6213c050f97d501078e39caa80349a218850f69315b59f3a61fa3756d9bf997f63fbaa41b2ffd2936592cd92a1972d95d6a2e417a0d4881cc5659193c5b0e34847aedc992e3a93a0b7438ebdc92432b93bb9a67a3de5ecdbd3ae93776903fdc5228fec6b340679c6a6b926a3c621fdc994c699dc38ee543b7e040c807d5f938e325b8d3bdff1781fc396079f2d814fdadddc8a843c25cafb07d603192b6fb718348e156753fa7b56b2d535687496672bdaab8eb2238587b9f2a70194cb616a522aaf02d7761c49b5c9cfb129b818e1ce9d856d919db257b435784777e57f362aa4b15a40ab72f12d7142df2ac64bb6c410be06f57be60ad9431d3a9d2952f6230e074f2440a1e056df2f0f98826e625b28695f3e7d0ff5f43e18a65ee90b845a56eb293b604046e9fcbe26a2f40466f843f1c3e7c68b3063b81f8994c2ea37ba855ea20319de497cf85654375644975bb4b772482707979b7521e6d22366ed733c73f88ec026f9e49e70b001e7b04055d3edf1908e810e65ef1a5daca73ff894b9e910e55c89bffa157d8af775ed1fb5a7966464e72cd7297f6a2bb50bd14869dba8aaecb459ada54e92190f949a0231c0266dbd26bf06fedb94031164084a2ad52d008f0f8f78e7f51367620c1d94f977b8d6001c6aede54be13b0eedb42b96fd35f914c98dd51b27d60241de46e7388edcfd54cc8b18f7674f0e5669527775056a02ca03003b40b9e0f39b4b8952be93a3964f8052e93643ebfbc75b910c5993ac1ed1356e4742799f7fee4f828c8768b368cba43996f5343193950c141dc3b771e2b7e53c147f439c719e924bc7a5a26f7be5b97f5f8621efb4f2d04c21097f85087bb57718007f01cc7706bd8875c433171e345f615beed5d789b1712fa4518e2fa490511463f8acbcff33d4d5df37adf0b1b9d496856fb70150a869256754742f829f8acd9e7cfe27e4e94e8a84137222d8c2a1257143e2197213925f24b1bc9191b39075ada7f247c93361d1def17f09397d63caf6fc01a3e4c19f9bc74504e4b5f1948ab17b537058802d8ef96377ca253a9488ecf12aff3da1856f2bb6a434414f47e1dbdcaca772ecc07e5210842c365f8aca3de7bb85befcb5db8d6d967b1c5bca18b2f60515b3e03d5fa9eef14dac938d228ccac117655d75bd2138c2f4143ea5570848135c59d0b2e82e71ce676e9df005578c7e29aae1987ed5acf193cc8799c63eb53178376142a74972ceb3857bab7b46191560a5729b07df50fd7e775e7b396e0a0578cb8e186973a61565e62fc0c4dc7372317fd97b8f6b2de9a11a9003418edbb3ee67a54fb4ea1ed6cc469a271632b053c04b5bc6c1c7081bf0e30fcc95c3f1f3e3f12253e82302a34d1022c1f654b7f59eff093bf69bb8025455b33d5de06486f929d1d155435db969dbd2d8ce0a2ba7088c39d8875aa20e548e8ee839d78f0a3a93c7a3c72f4224615af04636bd7fefbe1b8b36fb537f11132bc5d872bf415f1d81dc91bf533633a6977739bf64a43103f3680bd45cdfd816172a68a84a52dd02e5ac44be3bfe3617c09f479cce474669b5ac5837fd9884986a7ec930bf4880097524444702794331142f70d01a1ab108d3d86d9c3af581afe8e3c2fde4e59903a037ff227082c9b912b0e5707d9fadaa74ef9bdc20f598cd4b2234400878f500d3cba11131caa9cf6a947f174281cda23785347cdad6f8d44c95fa1f2a353261187499c98d957251f849a13257ed714725fef164e4d2c3ef0b2e39b8c41e3a49b2bd9775e7a1830738b9c78d3c095690673af8438bf1cab45caadcd4e7272fa4697db9988c4e2616d888dbd3c614fb65f3debfb7b8f17d5d05ecc2884a909f90cf7eb0f543df217858f4582ae9a83bf1fb2ab824999410f70537d4a9fd50abb355a975520aa47b0b6064e0327767087113696afec956762aba4881b4baf7f538f7287ace3f063affc1b4a8e45f9cee3833d62f2064e91138177b2c332e3376164fc8a60d0e5125e5106b3386ddf7b817fdb880ebf77b37c7ca5dff5cf75b3b279bdc86929ff0ac3a76ce235e765704602e4ea4e6c818014b1fbbf3329cce3d38f850aa95225d6200b3ad83689688b06bcf228a02851bbdebd5ae5f172877be3613a97132e4ce4e534a3907ead364217bd89e7175ed8cf147f1478083d3c6307cd3279ec88ed7c89c8b64c6ddb7e6e3b5785b719d99be920e49eb3c28f3e8e6e1caabc44eb6b22d63e8cdff26de0dcdfd7133f5ba1f25b076bbb6adc1f6cc7109fc16c1c0a0c36ca851b74639287c38d58ad4b3afe5d258423ab299418d77bd3f3e8349290a448d717e296994e080c077f8487798400ba7ea4307e85f8bd6d69dacd8073323ccf4e584f743325a589c1e60a295a8e2baa5d4111e915b577d3f54d6350efa91a3d36fb552d297c776246be6d45c8017b436b34ce001646295d7d48a48ffbdcaa085ad86154da32b80912b1dede9ae355a5c947146674c8b476e20e96ec0248764b79a1ccb371c524abbfe4e8c9e8206b06f5f8504e2d7457d53baff472f283491533a7c605ed3059178680207a479af77bc05228573f102ea480c3a02150f330c009a57fb2d841665300ce0bc10b9118a9128921286b345184780bb08b9dd6ba22ce9208343e9cb5d5ce834f45a5db27b87c9532e8c3d5048209253446d3ffe0bf920cb16865f6688dda10dee4af21a87a1935e30b1b42570118fe6b94dcb777183f0eeab22d1f7b7c8c1c854fc90c744c3fa2d59914082f60be1b7d5f4a04d6db61649014108c25fee52ce4133c84117ce8da837078d8fccbf2b9461a29b9642a40867f5d460f150de0bbaa96954a6dbd89d18a2486bd69196d0f3c3eaf80f5b3f6cffb4dd4534435f5be96a4ac7afbf3c71e80c283e779d7247dac52f3e7472fad62db853592e59dd71f9a43df73045dc62f67fa2eba142da70b8acacc6c711787fb2a5ee1a79b356173ec414aa1ae0e7e638a702460bc4ab43b651fef5876fddeb5199fd5a176694201f2c8e976a5cea1e20b10717bffbca200fd3ccd9357b08032e1a0c3414440d98edd4d1f6ee901a431bf74f7a484d6aa85cd22cf1b447eb8a615d679fb1f36d82c3ec735ce127e83fb79c6d299e68c1c4e89a15ad6433fd15b17392b9cccbdb96c66b85da82a5bff0c8d252de807f8f2ce6177a4e1cde893cb711dbe80e5034a7740bf9f2973e3cf70050455037d7ee7ae3c1dc9d219bb16d846be4a2b462bff773896cdda2b53f508b811024b273983590e854ec7b831ef1c4baa3efa4ac09692c275546e2bb2647c62f2cc5eef63e57baf951f897c5e352783412c2c77b1183674e54c328bd97668e8f841cb92863dc37a44d6c50f1802a88a21b0f2e6c4047ab02d41502ff24d0f692c2a0fb0bfacd4cda127a3bd97eddda475b094cd92b54cf2624e6a06e529d1d143735b53c7dc9642bfa8da2206b521501e11bc02d371120715f4c1efe15244883a4ab607cebf3fb6bf2412c2000000"], 0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000280)={'syz_tun\x00', {0x2, 0x4e22, @remote}})
mkdir(0x0, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5)
r5 = getpid()
sched_setscheduler(r5, 0x5, &(0x7f0000000040))
clock_gettime(0x0, 0x0)
syz_mount_image$btrfs(0x0, &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="335b18da61896e5a27d202584279dbf78545fc44570301717b9c3dd648e899fe09ef25c4e6a596c8421041b3c00801b176822eadd614b590affeb11b37eefb66bf5700049d6eab03bc1e1670af9b7a317b435cb91c0aea07851a8496d0f34d686e539640f64b4485544d05023da357b071b921707f3cde588ddd1d6ea14547afcb03b01a814ab8caac5c36c29ceacadea8fa3756a124012a341cd2ab224fb145c361abbf7e4f723344bd09c4ff1bf7975f3868e9"])
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000600)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000640)={{{@in=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000740)=0xe8)
lstat(&(0x7f0000000780)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
syz_mount_image$erofs(&(0x7f0000000340)='erofs\x00', &(0x7f0000000380)='./file1\x00', 0x4, 0x0, &(0x7f00000004c0), 0x2000000, &(0x7f0000000840)={[{@user_xattr='user_xattr'}, {@noacl='noacl'}, {@fault_injection={'fault_injection', 0x3d, 0x6}}], [{@subj_type={'subj_type', 0x3d, 'ntfs\x00'}}, {@subj_user={'subj_user', 0x3d, '/vboxnet0&'}}, {@subj_type={'subj_type'}}, {@fowner_lt={'fowner<', r6}}, {@euid_eq={'euid', 0x3d, r7}}, {@euid_eq={'euid', 0x3d, r8}}, {@fsname={'fsname', 0x3d, 'bfs\x00'}}]})
syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2000, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
syz_genetlink_get_family_id$ipvs(0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
recvfrom$llc(r9, &(0x7f0000000940)=""/230, 0xe6, 0x0, &(0x7f00000004c0)={0x1a, 0x0, 0x6, 0x2520, 0x4, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x10)
syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb846000000dc", 0xa}], 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000001280)='/dev/audio\x00', 0x2043, 0x0)
bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x2, 0x1a}, 0x20)

[  573.189642] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
01:20:53 executing program 5:
socket$bt_cmtp(0x1f, 0x3, 0x5)
getsockopt(0xffffffffffffffff, 0x7fff, 0x0, 0x0, &(0x7f00000002c0))
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x0)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x80045510, &(0x7f0000000040)={0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000300))
r1 = socket(0x10, 0x3, 0xa)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\xd4\x00\x04*\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\xf5\xe9J\xae\"\xe8\x9b\xb3l\xc7Ez\xcc\xc32\fg\xa9\x0fy\x80XC\xe9\x01\xd2\xdau\xaf\x1f\x00\x00\x00\x00\x00\x00\x00\x00E\xccaX\xf01R\x88D \x9c~\xd0[\x16\x0e\xf36r\x1b\xf8\x96\x86\xffG/q\xdf\xcaSS\xf62=\xdf\x80\x06\xff\xc1\x05-j\x80\x98Z\xdch\x01ped\x8b5\xc7\xd3!\xfc\\\x04f\x06/\xbf\xadZ\xcb\xe7\xffl\xef\xe5<\x88\xc0Z\xb9p\xce\xeb\xdf\xa5\x89\t\x8a\xd4\r\b\r\xeb$\x88\xf9\xe4\x06\x96\x82\xb1D\x83\xf1\x13\xcbiy\xb2\xf3\x90\x17\x9a\x18\xe2k@\x88\xf1\xf3\x1e\xd0J\nh\x1f\x00.\x00t6\x94tu\xab\a7\x11\xc9\x8a\xe3\xb4%\x9f\x1a\x1a\xff\x9b\t\xaaf\xcb\x90\xcaC\xa1\xdb\xc6\xde\x15\xab\xb4\xaes\x9f\x9e\x8f\x04|\xd2\x9e\xc7k\x9e\xf6\xbe\xb7\x83\x9f\x80q\xaa\xeaM$~j\x95\x14t\x8c\x93\xd0\xbb\x01\xa7\xc3|\xa6\xc8V2z\xf8\x1f)m,,\a\xc2\xd6;')
sendfile(r1, r2, &(0x7f0000000040)=0x100000, 0xfffffffe)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0)

01:20:53 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x43, 0x0, &(0x7f0000000100)=0x1e)

01:20:53 executing program 2:
mkdir(&(0x7f0000000a40)='./file1/file0\x00', 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x400000, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000100)={<r1=>0x0, @in={{0x2, 0x4e20, @empty}}}, &(0x7f00000001c0)=0x84)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r1}, 0x0)
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000280)={'syz_tun\x00', {0x2, 0x4e22, @remote}})
mkdir(0x0, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5)
r5 = getpid()
sched_setscheduler(r5, 0x5, &(0x7f0000000040))
clock_gettime(0x0, 0x0)
syz_mount_image$btrfs(0x0, &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="335b18da61896e5a27d202584279dbf78545fc44570301717b9c3dd648e899fe09ef25c4e6a596c8421041b3c00801b176822eadd614b590affeb11b37eefb66bf5700049d6eab03bc1e1670af9b7a317b435cb91c0aea07851a8496d0f34d686e539640f64b4485544d05023da357b071b921707f3cde588ddd1d6ea14547afcb03b01a814ab8caac5c36c29ceacadea8fa3756a124012a341cd2ab224fb145c361abbf7e4f723344bd09c4ff1bf7975f3868e9"])
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000600)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000640)={{{@in=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000740)=0xe8)
lstat(&(0x7f0000000780)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
syz_mount_image$erofs(&(0x7f0000000340)='erofs\x00', &(0x7f0000000380)='./file1\x00', 0x4, 0x0, &(0x7f00000004c0), 0x2000000, &(0x7f0000000840)={[{@user_xattr='user_xattr'}, {@noacl='noacl'}, {@fault_injection={'fault_injection', 0x3d, 0x6}}], [{@subj_type={'subj_type', 0x3d, 'ntfs\x00'}}, {@subj_user={'subj_user', 0x3d, '/vboxnet0&'}}, {@subj_type={'subj_type'}}, {@fowner_lt={'fowner<', r6}}, {@euid_eq={'euid', 0x3d, r7}}, {@euid_eq={'euid', 0x3d, r8}}, {@fsname={'fsname', 0x3d, 'bfs\x00'}}]})
syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2000, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
syz_genetlink_get_family_id$ipvs(0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
recvfrom$llc(r9, &(0x7f0000000940)=""/230, 0xe6, 0x0, &(0x7f00000004c0)={0x1a, 0x0, 0x6, 0x2520, 0x4, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x10)
syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb846000000dc", 0xa}], 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000001280)='/dev/audio\x00', 0x2043, 0x0)
bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x2, 0x1a}, 0x20)

01:20:53 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x43, 0x0, &(0x7f0000000100)=0x1e)

01:20:53 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000d80)={@in, 0x0, 0x8, 0x0, "4dbd3b0988e17b2d1d331c69872a9dda1d6a64edcd1cd30fb0ce73f1249d122559232b4970ee70afb23c5802edeb144bd80029d8a5754107cec75bbd53956c00"}, 0xd8)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10)
sendto$inet(r1, &(0x7f00000002c0)="ad", 0x1, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000000440)="af", 0x1, 0x4000010, 0x0, 0x0)

01:20:53 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x43, 0x0, &(0x7f0000000100)=0x1e)

01:20:53 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1)
recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[  573.862795] erofs: read_super, device -> /dev/loop2
[  573.948103] erofs: options -> user_xattr,noacl,fault_injection=0x0000000000000006,subj_type=ntfs
01:20:53 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x43, 0x0, &(0x7f0000000100)=0x1e)

[  574.012571] erofs: cannot find valid erofs superblock
01:20:53 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r3, &(0x7f0000000fc0)=""/4096, 0x1000, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000cc0)="7589f0da892457ee3604b3303d1176a13baaebcab9eba210a07246127b486e98e3029104796460b1dfef95b0368b0b19c338b1306db81cea8edfc66a6212607f01496a9963ef1a83caee01bd72e85c40dd287a1055ca6b801959badb1253ae3a85a47b0ec39b760f063d4756614fc1d3e68b9f4f32be2652ce67d2e776b433331ad58b9d70c0f258e00b9d56ff7ecb14e6050c70da00c5006b8cffd8f169f2861e2df3efe13056d1babf3dde7a2a1a5cc8cb207e10f61e215d2935a43c0db2cef01e23933c", 0xc5, 0x0, 0x0, 0x0)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xffffff60)
splice(r1, 0x0, r3, 0x0, 0x10003, 0x0)
connect(r4, &(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80)

01:20:53 executing program 5:
socket$bt_cmtp(0x1f, 0x3, 0x5)
getsockopt(0xffffffffffffffff, 0x7fff, 0x0, 0x0, &(0x7f00000002c0))
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x0)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x80045510, &(0x7f0000000040)={0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000300))
r1 = socket(0x10, 0x3, 0xa)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\xd4\x00\x04*\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\xf5\xe9J\xae\"\xe8\x9b\xb3l\xc7Ez\xcc\xc32\fg\xa9\x0fy\x80XC\xe9\x01\xd2\xdau\xaf\x1f\x00\x00\x00\x00\x00\x00\x00\x00E\xccaX\xf01R\x88D \x9c~\xd0[\x16\x0e\xf36r\x1b\xf8\x96\x86\xffG/q\xdf\xcaSS\xf62=\xdf\x80\x06\xff\xc1\x05-j\x80\x98Z\xdch\x01ped\x8b5\xc7\xd3!\xfc\\\x04f\x06/\xbf\xadZ\xcb\xe7\xffl\xef\xe5<\x88\xc0Z\xb9p\xce\xeb\xdf\xa5\x89\t\x8a\xd4\r\b\r\xeb$\x88\xf9\xe4\x06\x96\x82\xb1D\x83\xf1\x13\xcbiy\xb2\xf3\x90\x17\x9a\x18\xe2k@\x88\xf1\xf3\x1e\xd0J\nh\x1f\x00.\x00t6\x94tu\xab\a7\x11\xc9\x8a\xe3\xb4%\x9f\x1a\x1a\xff\x9b\t\xaaf\xcb\x90\xcaC\xa1\xdb\xc6\xde\x15\xab\xb4\xaes\x9f\x9e\x8f\x04|\xd2\x9e\xc7k\x9e\xf6\xbe\xb7\x83\x9f\x80q\xaa\xeaM$~j\x95\x14t\x8c\x93\xd0\xbb\x01\xa7\xc3|\xa6\xc8V2z\xf8\x1f)m,,\a\xc2\xd6;')
sendfile(r1, r2, &(0x7f0000000040)=0x100000, 0xfffffffe)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0)

01:20:54 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1)
recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

01:20:54 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
capset(&(0x7f0000000140)={0x19980330}, &(0x7f000047efe8))
clock_gettime(0x0, &(0x7f0000000180)={<r1=>0x0})
setsockopt$sock_timeval(r0, 0x1, 0xc, &(0x7f0000000100)={r1}, 0x10)

01:20:54 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}<B\xfc.\x9cia\x14\xa6\xf8\x88\xf0\xda\x85\'v\x83\xcf\xc1\xc4\xd2\xbfq\xc2U\xa3\x13Md\xcc?\xed\x8e\x97y\x8d\xeb\x861\xcb\xf7h,\x9f\xa2\xed\x03\x14e\xaa\x19\x1d\xf9\"\xf7d)|\xba\"\xa8I\x9d\x17\x7fI\xfb\xa9@\xf5[\xbc\x8br?\xd3t\xf1\xfe\xd7\x8c\x8a\xee\xc6\x81\x1d\x9bXyHs\x87\xd5e\x94\xa1L%\x88\'M\xe8O\xa2v\x100+?\xb5Ar\xa8\xc9\x10\xa0~|v\xeaFZ\xa6\x84\x02', 0x1, 0x0)
chroot(&(0x7f0000000000)='./file0\x00')
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$security_smack_transmute(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0)

01:20:54 executing program 3:
capset(&(0x7f0000000000)={0x8020080522}, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x48)

01:20:54 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1)
recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

01:20:54 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
stat(&(0x7f0000000b00)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
read$FUSE(r0, 0x0, 0x0)

01:20:54 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r1 = dup(r0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c9, &(0x7f00000003c0))

01:20:54 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}<B\xfc.\x9cia\x14\xa6\xf8\x88\xf0\xda\x85\'v\x83\xcf\xc1\xc4\xd2\xbfq\xc2U\xa3\x13Md\xcc?\xed\x8e\x97y\x8d\xeb\x861\xcb\xf7h,\x9f\xa2\xed\x03\x14e\xaa\x19\x1d\xf9\"\xf7d)|\xba\"\xa8I\x9d\x17\x7fI\xfb\xa9@\xf5[\xbc\x8br?\xd3t\xf1\xfe\xd7\x8c\x8a\xee\xc6\x81\x1d\x9bXyHs\x87\xd5e\x94\xa1L%\x88\'M\xe8O\xa2v\x100+?\xb5Ar\xa8\xc9\x10\xa0~|v\xeaFZ\xa6\x84\x02', 0x1, 0x0)
chroot(&(0x7f0000000000)='./file0\x00')
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$security_smack_transmute(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0)

01:20:54 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r1 = dup(r0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c9, &(0x7f00000003c0))

01:20:54 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1)
recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

01:20:54 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r3, &(0x7f0000000fc0)=""/4096, 0x1000, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000cc0)="7589f0da892457ee3604b3303d1176a13baaebcab9eba210a07246127b486e98e3029104796460b1dfef95b0368b0b19c338b1306db81cea8edfc66a6212607f01496a9963ef1a83caee01bd72e85c40dd287a1055ca6b801959badb1253ae3a85a47b0ec39b760f063d4756614fc1d3e68b9f4f32be2652ce67d2e776b433331ad58b9d70c0f258e00b9d56ff7ecb14e6050c70da00c5006b8cffd8f169f2861e2df3efe13056d1babf3dde7a2a1a5cc8cb207e10f61e215d2935a43c0db2cef01e23933c", 0xc5, 0x0, 0x0, 0x0)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xffffff60)
splice(r1, 0x0, r3, 0x0, 0x10003, 0x0)
connect(r4, &(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80)

01:20:54 executing program 5:
socket$bt_cmtp(0x1f, 0x3, 0x5)
getsockopt(0xffffffffffffffff, 0x7fff, 0x0, 0x0, &(0x7f00000002c0))
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x0)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x80045510, &(0x7f0000000040)={0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000300))
r1 = socket(0x10, 0x3, 0xa)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\xd4\x00\x04*\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\xf5\xe9J\xae\"\xe8\x9b\xb3l\xc7Ez\xcc\xc32\fg\xa9\x0fy\x80XC\xe9\x01\xd2\xdau\xaf\x1f\x00\x00\x00\x00\x00\x00\x00\x00E\xccaX\xf01R\x88D \x9c~\xd0[\x16\x0e\xf36r\x1b\xf8\x96\x86\xffG/q\xdf\xcaSS\xf62=\xdf\x80\x06\xff\xc1\x05-j\x80\x98Z\xdch\x01ped\x8b5\xc7\xd3!\xfc\\\x04f\x06/\xbf\xadZ\xcb\xe7\xffl\xef\xe5<\x88\xc0Z\xb9p\xce\xeb\xdf\xa5\x89\t\x8a\xd4\r\b\r\xeb$\x88\xf9\xe4\x06\x96\x82\xb1D\x83\xf1\x13\xcbiy\xb2\xf3\x90\x17\x9a\x18\xe2k@\x88\xf1\xf3\x1e\xd0J\nh\x1f\x00.\x00t6\x94tu\xab\a7\x11\xc9\x8a\xe3\xb4%\x9f\x1a\x1a\xff\x9b\t\xaaf\xcb\x90\xcaC\xa1\xdb\xc6\xde\x15\xab\xb4\xaes\x9f\x9e\x8f\x04|\xd2\x9e\xc7k\x9e\xf6\xbe\xb7\x83\x9f\x80q\xaa\xeaM$~j\x95\x14t\x8c\x93\xd0\xbb\x01\xa7\xc3|\xa6\xc8V2z\xf8\x1f)m,,\a\xc2\xd6;')
sendfile(r1, r2, &(0x7f0000000040)=0x100000, 0xfffffffe)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0)

01:20:54 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}<B\xfc.\x9cia\x14\xa6\xf8\x88\xf0\xda\x85\'v\x83\xcf\xc1\xc4\xd2\xbfq\xc2U\xa3\x13Md\xcc?\xed\x8e\x97y\x8d\xeb\x861\xcb\xf7h,\x9f\xa2\xed\x03\x14e\xaa\x19\x1d\xf9\"\xf7d)|\xba\"\xa8I\x9d\x17\x7fI\xfb\xa9@\xf5[\xbc\x8br?\xd3t\xf1\xfe\xd7\x8c\x8a\xee\xc6\x81\x1d\x9bXyHs\x87\xd5e\x94\xa1L%\x88\'M\xe8O\xa2v\x100+?\xb5Ar\xa8\xc9\x10\xa0~|v\xeaFZ\xa6\x84\x02', 0x1, 0x0)
chroot(&(0x7f0000000000)='./file0\x00')
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$security_smack_transmute(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0)

01:20:54 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="88f265b80b5505b931ceefb873230bfa", 0x10)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x0, @remote}, {0x0, @dev}, 0x0, {0x2, 0x0, @broadcast}, 'syz_tun\x00'})

01:20:54 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r1 = dup(r0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c9, &(0x7f00000003c0))

01:20:54 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)

01:20:54 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r1 = dup(r0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c9, &(0x7f00000003c0))

01:20:55 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ptmx\x00', 0x0, 0x0)
r1 = epoll_create1(0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r0, 0x0)
dup3(r2, r0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080))

01:20:55 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}<B\xfc.\x9cia\x14\xa6\xf8\x88\xf0\xda\x85\'v\x83\xcf\xc1\xc4\xd2\xbfq\xc2U\xa3\x13Md\xcc?\xed\x8e\x97y\x8d\xeb\x861\xcb\xf7h,\x9f\xa2\xed\x03\x14e\xaa\x19\x1d\xf9\"\xf7d)|\xba\"\xa8I\x9d\x17\x7fI\xfb\xa9@\xf5[\xbc\x8br?\xd3t\xf1\xfe\xd7\x8c\x8a\xee\xc6\x81\x1d\x9bXyHs\x87\xd5e\x94\xa1L%\x88\'M\xe8O\xa2v\x100+?\xb5Ar\xa8\xc9\x10\xa0~|v\xeaFZ\xa6\x84\x02', 0x1, 0x0)
chroot(&(0x7f0000000000)='./file0\x00')
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$security_smack_transmute(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0)

01:20:55 executing program 1:
socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00\x00\x00\x05\x00', 0x803})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x304)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1})

01:20:55 executing program 2:
perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
ioctl$CAPI_NCCI_OPENCOUNT(0xffffffffffffffff, 0x80044326, &(0x7f0000000040)=0x1)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="682600f800000000611c00010000"], 0xe)

01:20:55 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="9a003000008100c4e17c53aa155b0000b8b1dc00000f23c80f21f835080090000f23f8c4c255920436b8010000000f01d9b9550300000f32c4c1dc5471380f01ca660f28aa2100000066b89d000f00d8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
openat$autofs(0xffffffffffffff9c, 0x0, 0x980, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0xb, 0x2}, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x20000a}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'])
bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000640), 0x10)
getsockopt$netlink(r1, 0x10e, 0x0, 0x0, &(0x7f0000000240))
recvmsg(0xffffffffffffff9c, 0x0, 0x0)
recvfrom$unix(0xffffffffffffffff, &(0x7f0000000700)=""/101, 0x65, 0x2042, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e)

[  575.766016] XFS (loop5): Invalid superblock magic number
01:20:55 executing program 0:
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), 0x0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uhid\x00', 0x2, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, 0x0)
ioctl$TIOCSBRK(r2, 0x5427)
sendmsg$nfc_llcp(0xffffffffffffffff, 0x0, 0x40004)
llistxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/60, 0x3c)
write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syx1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00W1\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x17\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x11c)
epoll_pwait(r2, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], 0x6, 0x6, &(0x7f0000000040)={0x200}, 0x8)
add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000001c0)={0x4, 0x40000100, &(0x7f00000021c0)="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", 0x0, 0x550})
ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000200))
openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x80001, 0x0)

01:20:55 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="9a003000008100c4e17c53aa155b0000b8b1dc00000f23c80f21f835080090000f23f8c4c255920436b8010000000f01d9b9550300000f32c4c1dc5471380f01ca660f28aa2100000066b89d000f00d8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
openat$autofs(0xffffffffffffff9c, 0x0, 0x980, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0xb, 0x2}, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x20000a}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'])
bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000640), 0x10)
getsockopt$netlink(r1, 0x10e, 0x0, 0x0, &(0x7f0000000240))
recvmsg(0xffffffffffffff9c, 0x0, 0x0)
recvfrom$unix(0xffffffffffffffff, &(0x7f0000000700)=""/101, 0x65, 0x2042, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e)

01:20:55 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ptmx\x00', 0x0, 0x0)
r1 = epoll_create1(0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r0, 0x0)
dup3(r2, r0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080))

01:20:55 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r3, &(0x7f0000000fc0)=""/4096, 0x1000, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000cc0)="7589f0da892457ee3604b3303d1176a13baaebcab9eba210a07246127b486e98e3029104796460b1dfef95b0368b0b19c338b1306db81cea8edfc66a6212607f01496a9963ef1a83caee01bd72e85c40dd287a1055ca6b801959badb1253ae3a85a47b0ec39b760f063d4756614fc1d3e68b9f4f32be2652ce67d2e776b433331ad58b9d70c0f258e00b9d56ff7ecb14e6050c70da00c5006b8cffd8f169f2861e2df3efe13056d1babf3dde7a2a1a5cc8cb207e10f61e215d2935a43c0db2cef01e23933c", 0xc5, 0x0, 0x0, 0x0)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xffffff60)
splice(r1, 0x0, r3, 0x0, 0x10003, 0x0)
connect(r4, &(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80)

[  576.019355] device nr0
 entered promiscuous mode
[  576.024898] hid-generic 0000:0000:0000.0002: item fetching failed at offset -1918574197
[  576.053667] hid-generic: probe of 0000:0000:0000.0002 failed with error -22
01:20:55 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ptmx\x00', 0x0, 0x0)
r1 = epoll_create1(0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r0, 0x0)
dup3(r2, r0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080))

[  576.229341] XFS (loop5): Invalid superblock magic number
01:20:56 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ptmx\x00', 0x0, 0x0)
r1 = epoll_create1(0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r0, 0x0)
dup3(r2, r0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080))

01:20:56 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="9a003000008100c4e17c53aa155b0000b8b1dc00000f23c80f21f835080090000f23f8c4c255920436b8010000000f01d9b9550300000f32c4c1dc5471380f01ca660f28aa2100000066b89d000f00d8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
openat$autofs(0xffffffffffffff9c, 0x0, 0x980, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0xb, 0x2}, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x20000a}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'])
bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000640), 0x10)
getsockopt$netlink(r1, 0x10e, 0x0, 0x0, &(0x7f0000000240))
recvmsg(0xffffffffffffff9c, 0x0, 0x0)
recvfrom$unix(0xffffffffffffffff, &(0x7f0000000700)=""/101, 0x65, 0x2042, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e)

[  576.416662] hid-generic 0000:0000:0000.0003: item fetching failed at offset -2079846005
[  576.425029] hid-generic: probe of 0000:0000:0000.0003 failed with error -22
01:20:56 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f000000ac80), 0x400000000000302, 0x4008800)

01:20:56 executing program 0:
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), 0x0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uhid\x00', 0x2, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, 0x0)
ioctl$TIOCSBRK(r2, 0x5427)
sendmsg$nfc_llcp(0xffffffffffffffff, 0x0, 0x40004)
llistxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/60, 0x3c)
write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syx1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00W1\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x17\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x11c)
epoll_pwait(r2, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], 0x6, 0x6, &(0x7f0000000040)={0x200}, 0x8)
add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000001c0)={0x4, 0x40000100, &(0x7f00000021c0)="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", 0x0, 0x550})
ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000200))
openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x80001, 0x0)

[  576.625216] hid-generic 0000:0000:0000.0004: item fetching failed at offset -1907819573
[  576.656602] hid-generic: probe of 0000:0000:0000.0004 failed with error -22
[  576.738666] XFS (loop5): Invalid superblock magic number
01:20:56 executing program 1:
socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00\x00\x00\x05\x00', 0x803})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x304)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1})

01:20:56 executing program 2:
capset(&(0x7f0000000200)={0x20080522}, &(0x7f0000000140))
mq_open(&(0x7f0000000000)='\'vboxnet0+\'}wlan0', 0x843, 0x80, &(0x7f0000000100)={0x0, 0x7f, 0x4, 0x1ff, 0x5, 0x9, 0x8, 0x81})

01:20:56 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f000000ac80), 0x400000000000302, 0x4008800)

01:20:56 executing program 4:
r0 = socket(0x200000000000011, 0x80002, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1}, 0x14)
sendmmsg$inet_sctp(r0, &(0x7f0000871fc8), 0x71, 0x0)

01:20:56 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="9a003000008100c4e17c53aa155b0000b8b1dc00000f23c80f21f835080090000f23f8c4c255920436b8010000000f01d9b9550300000f32c4c1dc5471380f01ca660f28aa2100000066b89d000f00d8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
openat$autofs(0xffffffffffffff9c, 0x0, 0x980, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0xb, 0x2}, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x20000a}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'])
bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000640), 0x10)
getsockopt$netlink(r1, 0x10e, 0x0, 0x0, &(0x7f0000000240))
recvmsg(0xffffffffffffff9c, 0x0, 0x0)
recvfrom$unix(0xffffffffffffffff, &(0x7f0000000700)=""/101, 0x65, 0x2042, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e)

01:20:57 executing program 0:
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), 0x0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uhid\x00', 0x2, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, 0x0)
ioctl$TIOCSBRK(r2, 0x5427)
sendmsg$nfc_llcp(0xffffffffffffffff, 0x0, 0x40004)
llistxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/60, 0x3c)
write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syx1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00W1\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x17\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x11c)
epoll_pwait(r2, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], 0x6, 0x6, &(0x7f0000000040)={0x200}, 0x8)
add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000001c0)={0x4, 0x40000100, &(0x7f00000021c0)="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", 0x0, 0x550})
ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000200))
openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x80001, 0x0)

01:20:57 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
close(r0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18)
r2 = accept$alg(r0, 0x0, 0x0)
io_setup(0x1, &(0x7f0000e4b000)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000500)='\x00', 0x1}])

01:20:57 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc), 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000)=0xffffffff00000000, 0x0)
gettid()
timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
r0 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa)
r1 = semget$private(0x0, 0x4, 0x144)
semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000240)=0x53)
bind$bt_sco(r0, &(0x7f0000000700)={0x1f, {0x9, 0x4, 0x8, 0x80000000, 0x3, 0x7}}, 0x8)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x27ff, 0x0, 0x0, 0x0, 0x0, 0x1})
openat$mixer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140))
personality(0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000300), &(0x7f0000000340)=0x8)
ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000480)={0x14}, 0x14)
ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000280))
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000740), &(0x7f00000004c0)=0x8)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000440), 0x4)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0), 0x20)
add_key(&(0x7f00000002c0)='user\x00', &(0x7f0000000500), 0x0, 0x0, 0xfffffffffffffff8)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000100))
keyctl$setperm(0x5, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x0, 0x0)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000200))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180))

[  577.401916] XFS (loop5): Invalid superblock magic number
[  577.532708] hid-generic 0000:0000:0000.0005: item fetching failed at offset -2064126581
[  577.574658] hid-generic: probe of 0000:0000:0000.0005 failed with error -22
01:20:57 executing program 2:
mprotect(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0)
prlimit64(0x0, 0x0, &(0x7f00000004c0), 0x0)

01:20:57 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f000000ac80), 0x400000000000302, 0x4008800)

01:20:57 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000d11000), &(0x7f00000001c0)=0xffffffffffffff6e)

01:20:57 executing program 2:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket(0x1, 0x80005, 0x0)
io_setup(0x800, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080), 0x121}])

01:20:58 executing program 1:
socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00\x00\x00\x05\x00', 0x803})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x304)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1})

01:20:58 executing program 0:
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), 0x0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uhid\x00', 0x2, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, 0x0)
ioctl$TIOCSBRK(r2, 0x5427)
sendmsg$nfc_llcp(0xffffffffffffffff, 0x0, 0x40004)
llistxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/60, 0x3c)
write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syx1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00W1\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x17\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x11c)
epoll_pwait(r2, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], 0x6, 0x6, &(0x7f0000000040)={0x200}, 0x8)
add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000001c0)={0x4, 0x40000100, &(0x7f00000021c0)="dbe3cb40dd64562c12185445e11d19c866aaf01d48ce433326bc0f8852e9e7f0f2a99f2af607e4fd036f99b0c836760ffe1c4c3b7de0cae79110f8345ebf0dc252d6c673b7bac5b65edafa3c957e0540f613827f6576774dbe9708c07b003b567b5f77c4227990d89a6992e2f0e5795176c8db8a755b9cea72832b9c77b8ff596a3043da07c71e3cd939f97b0b665636c6f1d0f59692e09f483a59f5e5c30a754cee435711dbdf4eb546f21a307f52859a6277d17c7b4ecf5c419663b19ea21d61f18ea929346ec2afee87e470cbd9b2f9272c430e3dd7b0e201dc171f5ae06d76c237e7c53b6db1a968080db7ac1144f0851a2bfb0561fefea5e63d52f6cf0411e97401ae902431b24e61d74e866cda2f1a984972a77ff4c98333ffd86ff26fad4cb380f7af53dd1ed1d101dcdf70d55c10fd72687a59a294fcd86f6abf298c76879dbe9b03d77d2fa23dd3f47cb56a7d20aa6b9ebfa22d199032f1a2959a53decf3c005a35842cca524e67b916414010791074e857a86b082f328c0e0fbeb6d8f250756828809b2bcb23a2cecb5e27d5ad17b59502360740b6213fbd068bc7fbb57a115cf8e55886aa60cd1dfd594fe70a9606d9da859d9c5e0b0a9957a3bc89e3e44682a0c63ef4031e6b553c2f411724b45abcee3bb1bd393da7a578568a85dc50bb91b552a020abb9532c53054906e7d94c0a5c83baf77fd1ffa41d15102d1861f0a1dd3ab9d8876817e21930ad7312be2b717c441bdd558b913035554f374a663a62e14f7c0f4c9abc852330ed511532da26a6107615b50741b0bf829e960c3e876c67d49f436d975c3e1ce6d396d293f05caa2daf3134d50067203c904d496188d0f5ecb4466ed6130ebc5e01fecfed85cf9e68aae9d9daa050a00734e9b0a3067bcd54abdaa2dffbc2851ebcd3242dce55320f11ac24ff8161db8db0fe9c20cf6f5bb995e23af2b7bec34682da7e35df88d446a3ef8f6bdccd5853d4ae5fceb98069b220062f41fcef12a81a85656e59a11e8b39c120a09623549699725affbc21db2b14eab7b4490efcaf1c7b55d2e74d71549adb79a09e1736c85238493fea28e9aa3801e99a017ff6a2b073a4eade6befac97fb6fea19b58537919f01bbe860e03ff40a653afc5c09e74e77638d75783992317deb63ba166591a7af89fdf8159358badf1ec2bfeec2047224b1383a8ccd66d2452aaaea530d21f7bc0ad3428081dbe0fd930c2486d3fa6babe593d32f4fe9b637796eae83012b0b4db14fe434227b877bbbdab77fc1766444e6220b80d56fe9a7b31149bbec11954370e2c9d12daf3eb4eaf7f3fd16450bd1a807bf8f1188d325152c944c59162551167f8f140d0010f53ef624f30f98644dbfd3b71028d4bb4f39bb4f0cadc8800cd5dad68121bab705e5c26e61817c6c478a0f94bf58e36cca0cf6724f9ac3aad2f5672edf32cada453b46bd9c7086b05ccf5018c5ae8647960df3335922b32c9457ea6c7e322ea19b1ada4056e5c74eb6545b78d69c91fc2d480cdf74b2936c2bc71e1f2bcadab2dc373f8f0e1caf978f88d60854984e503ab01e66dc03d3318b85a1d917c7873f5aad428d0483bb940a7a3644bfc59cb83689253d59dc2332b61220f5b57eccf902d235f4d2b3ee7d21808c758b4599903c83fd8b7701600c70836d8f725575b3563f105066a1bfa867d7613f73fedce17389ea5e143aa792553231d7b47bc5cf41fb283a51aa5a14f43f9c4e2d7db7eae9d0de47c5fa438114f1c54f8465d4ae5e2f347dd42b699ba53aa33009913367db04662449ef327a08685a7ff078edc6a6bdc3b535961c9d2907d5f00325d6ba6ab1181416ef4535102b88d18178ce8d76d709e345023c389202b08c8b0a6cf0c23bb0fd94ec7e3aa8b6117d5402b07cb3e1911bdb24cf0f", 0x0, 0x550})
ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000200))
openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x80001, 0x0)

01:20:58 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f000000ac80), 0x400000000000302, 0x4008800)

01:20:58 executing program 2:
syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000340)='./bus\x00', 0x7fff, 0x0, 0x0, 0x1208002, 0x0)

01:20:58 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc), 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000)=0xffffffff00000000, 0x0)
gettid()
timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
r0 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa)
r1 = semget$private(0x0, 0x4, 0x144)
semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000240)=0x53)
bind$bt_sco(r0, &(0x7f0000000700)={0x1f, {0x9, 0x4, 0x8, 0x80000000, 0x3, 0x7}}, 0x8)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x27ff, 0x0, 0x0, 0x0, 0x0, 0x1})
openat$mixer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140))
personality(0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000300), &(0x7f0000000340)=0x8)
ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000480)={0x14}, 0x14)
ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000280))
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000740), &(0x7f00000004c0)=0x8)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000440), 0x4)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0), 0x20)
add_key(&(0x7f00000002c0)='user\x00', &(0x7f0000000500), 0x0, 0x0, 0xfffffffffffffff8)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000100))
keyctl$setperm(0x5, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x0, 0x0)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000200))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180))

01:20:58 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000280)=""/240, 0xd932}, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x11)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x0, 0x0, 0x4000]}, 0x2a}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0)

[  578.258268] hid-generic 0000:0000:0000.0006: item fetching failed at offset -1902173109
[  578.281190] hid-generic: probe of 0000:0000:0000.0006 failed with error -22
01:20:58 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000280)=""/240, 0xd932}, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x11)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x0, 0x0, 0x4000]}, 0x2a}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0)

01:20:58 executing program 2:
syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000340)='./bus\x00', 0x7fff, 0x0, 0x0, 0x1208002, 0x0)

01:20:58 executing program 2:
syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000340)='./bus\x00', 0x7fff, 0x0, 0x0, 0x1208002, 0x0)

01:20:58 executing program 3:
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @remote}, 0x80, 0x0}, 0x7ffffff7)

01:20:58 executing program 3:
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @remote}, 0x80, 0x0}, 0x7ffffff7)

01:20:58 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000280)=""/240, 0xd932}, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x11)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x0, 0x0, 0x4000]}, 0x2a}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0)

01:20:58 executing program 1:
socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00\x00\x00\x05\x00', 0x803})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x304)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1})

01:20:58 executing program 3:
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @remote}, 0x80, 0x0}, 0x7ffffff7)

01:20:58 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc), 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000)=0xffffffff00000000, 0x0)
gettid()
timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
r0 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa)
r1 = semget$private(0x0, 0x4, 0x144)
semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000240)=0x53)
bind$bt_sco(r0, &(0x7f0000000700)={0x1f, {0x9, 0x4, 0x8, 0x80000000, 0x3, 0x7}}, 0x8)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x27ff, 0x0, 0x0, 0x0, 0x0, 0x1})
openat$mixer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140))
personality(0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000300), &(0x7f0000000340)=0x8)
ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000480)={0x14}, 0x14)
ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000280))
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000740), &(0x7f00000004c0)=0x8)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000440), 0x4)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0), 0x20)
add_key(&(0x7f00000002c0)='user\x00', &(0x7f0000000500), 0x0, 0x0, 0xfffffffffffffff8)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000100))
keyctl$setperm(0x5, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x0, 0x0)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000200))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180))

01:20:58 executing program 2:
syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000340)='./bus\x00', 0x7fff, 0x0, 0x0, 0x1208002, 0x0)

01:20:58 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0)
pipe(&(0x7f00000003c0))
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
unshare(0x2000400)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0)

01:20:58 executing program 3:
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @remote}, 0x80, 0x0}, 0x7ffffff7)

01:20:59 executing program 0:
syz_emit_ethernet(0xe, &(0x7f0000000000)={@local, @link_local, [], {@generic={0x8ff}}}, 0x0)

01:20:59 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000280)=""/240, 0xd932}, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x11)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x0, 0x0, 0x4000]}, 0x2a}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0)

01:20:59 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080))
r2 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000))
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x80605414, 0x0)
dup3(r2, r3, 0x0)
dup3(r2, r1, 0x0)

01:20:59 executing program 0:
syz_emit_ethernet(0xe, &(0x7f0000000000)={@local, @link_local, [], {@generic={0x8ff}}}, 0x0)

01:20:59 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r1=>0x0}, &(0x7f0000000040)=0xc)
syz_mount_image$hfsplus(&(0x7f00000000c0)='hfsplus\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@gid={'gid', 0x3d, r1}}]})

01:20:59 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc), 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000)=0xffffffff00000000, 0x0)
gettid()
timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
r0 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa)
r1 = semget$private(0x0, 0x4, 0x144)
semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000240)=0x53)
bind$bt_sco(r0, &(0x7f0000000700)={0x1f, {0x9, 0x4, 0x8, 0x80000000, 0x3, 0x7}}, 0x8)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x27ff, 0x0, 0x0, 0x0, 0x0, 0x1})
openat$mixer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140))
personality(0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000300), &(0x7f0000000340)=0x8)
ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000480)={0x14}, 0x14)
ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000280))
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000740), &(0x7f00000004c0)=0x8)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000440), 0x4)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0), 0x20)
add_key(&(0x7f00000002c0)='user\x00', &(0x7f0000000500), 0x0, 0x0, 0xfffffffffffffff8)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000100))
keyctl$setperm(0x5, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x0, 0x0)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000200))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180))

[  579.404274] hfsplus: gid requires an argument
[  579.472412] hfsplus: unable to parse mount options
[  579.587468] hfsplus: gid requires an argument
[  579.592003] hfsplus: unable to parse mount options
01:20:59 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080))
r2 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000))
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x80605414, 0x0)
dup3(r2, r3, 0x0)
dup3(r2, r1, 0x0)

01:20:59 executing program 0:
syz_emit_ethernet(0xe, &(0x7f0000000000)={@local, @link_local, [], {@generic={0x8ff}}}, 0x0)

01:20:59 executing program 1:
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x105000, 0x0)
write(r0, &(0x7f0000000400)="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", 0x200)
sendfile(r0, r1, 0x0, 0x10000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = open(&(0x7f0000000180)='./file0\x00', 0x8000000000141042, 0x0)
ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c)
sendfile(r3, r3, 0x0, 0xa198)

01:20:59 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r1=>0x0}, &(0x7f0000000040)=0xc)
syz_mount_image$hfsplus(&(0x7f00000000c0)='hfsplus\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@gid={'gid', 0x3d, r1}}]})

01:20:59 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000080))

01:20:59 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)

[  579.933691] hfsplus: gid requires an argument
[  579.947702] hfsplus: unable to parse mount options
[  579.952721] audit: type=1800 audit(1548120059.763:138): pid=23548 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor1" name="file0" dev="sda1" ino=16977 res=0
01:20:59 executing program 0:
syz_emit_ethernet(0xe, &(0x7f0000000000)={@local, @link_local, [], {@generic={0x8ff}}}, 0x0)

[  580.000074] audit: type=1804 audit(1548120059.763:139): pid=23548 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir567285919/syzkaller.3ASeoF/581/file0" dev="sda1" ino=16977 res=1
01:20:59 executing program 5:
r0 = memfd_create(&(0x7f0000000080)='m\x815\x1e9\xcf\xc2(\xa4\xc6r\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0xa)
lseek(r0, 0x0, 0x4)

01:20:59 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080))
r2 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000))
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x80605414, 0x0)
dup3(r2, r3, 0x0)
dup3(r2, r1, 0x0)

01:20:59 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r1=>0x0}, &(0x7f0000000040)=0xc)
syz_mount_image$hfsplus(&(0x7f00000000c0)='hfsplus\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@gid={'gid', 0x3d, r1}}]})

[  580.153534] audit: type=1800 audit(1548120059.763:140): pid=23548 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor1" name="file0" dev="sda1" ino=16977 res=0
01:21:00 executing program 0:
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x1000001)
pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000380)="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", 0x568}], 0x1, 0x0)

01:21:00 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCOUTQ(r0, 0x541b, &(0x7f0000000100))

[  580.289523] audit: type=1804 audit(1548120059.843:141): pid=23551 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir567285919/syzkaller.3ASeoF/581/file0" dev="sda1" ino=16977 res=1
[  580.322381] hfsplus: gid requires an argument
[  580.343286] hfsplus: unable to parse mount options
01:21:00 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080))
r2 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000))
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x80605414, 0x0)
dup3(r2, r3, 0x0)
dup3(r2, r1, 0x0)

01:21:00 executing program 0:
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x1000001)
pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000380)="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", 0x568}], 0x1, 0x0)

[  580.743621] audit: type=1804 audit(1548120060.553:142): pid=23551 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir567285919/syzkaller.3ASeoF/581/file0" dev="sda1" ino=16977 res=1
01:21:00 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r1=>0x0}, &(0x7f0000000040)=0xc)
syz_mount_image$hfsplus(&(0x7f00000000c0)='hfsplus\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@gid={'gid', 0x3d, r1}}]})

01:21:00 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCOUTQ(r0, 0x541b, &(0x7f0000000100))

01:21:00 executing program 4:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xffffffea)
r2 = epoll_create(0x8)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240))
ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
close(r2)

01:21:00 executing program 0:
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x1000001)
pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000380)="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", 0x568}], 0x1, 0x0)

01:21:00 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040))
ppoll(&(0x7f0000000540)=[{r2}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x74eda5c2})

[  580.774863] audit: type=1804 audit(1548120060.583:143): pid=23594 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir567285919/syzkaller.3ASeoF/581/file0" dev="sda1" ino=16977 res=1
01:21:00 executing program 1:
r0 = socket$kcm(0xa, 0x2, 0x73)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
bind(r0, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80)
sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0}, 0x0)

01:21:00 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCOUTQ(r0, 0x541b, &(0x7f0000000100))

01:21:00 executing program 0:
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x1000001)
pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000380)="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", 0x568}], 0x1, 0x0)

[  580.874854] hfsplus: gid requires an argument
[  580.894552] hfsplus: unable to parse mount options
01:21:00 executing program 1:
pipe(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000380)=0x13, 0x4)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000000)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x6, 0x0)
accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f0000000180)=0x1c, 0x800)
r4 = geteuid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000003c0))
lchown(&(0x7f0000000200)='./file0\x00', r4, 0x0)
connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = accept4(r0, 0x0, &(0x7f0000000000), 0x0)
setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x4)
sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffff9c, 0xae78, &(0x7f00000000c0))
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8)
setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000001c0)={@loopback, r6}, 0x14)

01:21:00 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCOUTQ(r0, 0x541b, &(0x7f0000000100))

01:21:00 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='stack\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)

01:21:01 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$int_in(r0, 0x80000080045005, &(0x7f0000000100))

01:21:01 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000000)="2e0000002500817ee45ae087185082cf1024b0eba06ec400002339e00586f9835b3f0016914879008cd90080e230", 0x2e}], 0x1}, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)

01:21:01 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040))
ppoll(&(0x7f0000000540)=[{r2}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x74eda5c2})

[  581.491912] netlink: 26 bytes leftover after parsing attributes in process `syz-executor5'.
[  581.549022] netlink: 26 bytes leftover after parsing attributes in process `syz-executor5'.
01:21:01 executing program 4:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xffffffea)
r2 = epoll_create(0x8)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240))
ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
close(r2)

01:21:01 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040))
ppoll(&(0x7f0000000540)=[{r2}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x74eda5c2})

01:21:01 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x1001, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000300))
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

01:21:01 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000000)="2e0000002500817ee45ae087185082cf1024b0eba06ec400002339e00586f9835b3f0016914879008cd90080e230", 0x2e}], 0x1}, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)

01:21:01 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000000)="2e0000002500817ee45ae087185082cf1024b0eba06ec400002339e00586f9835b3f0016914879008cd90080e230", 0x2e}], 0x1}, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)

01:21:01 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x65, &(0x7f0000013e95), 0x4)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0xb, 0x0, &(0x7f0000000100))
close(r2)
close(r1)

[  581.808603] netlink: 26 bytes leftover after parsing attributes in process `syz-executor5'.
01:21:01 executing program 1:
pipe(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000380)=0x13, 0x4)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000000)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x6, 0x0)
accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f0000000180)=0x1c, 0x800)
r4 = geteuid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000003c0))
lchown(&(0x7f0000000200)='./file0\x00', r4, 0x0)
connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = accept4(r0, 0x0, &(0x7f0000000000), 0x0)
setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x4)
sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffff9c, 0xae78, &(0x7f00000000c0))
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8)
setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000001c0)={@loopback, r6}, 0x14)

01:21:01 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000000)="2e0000002500817ee45ae087185082cf1024b0eba06ec400002339e00586f9835b3f0016914879008cd90080e230", 0x2e}], 0x1}, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)

[  581.942559] netlink: 26 bytes leftover after parsing attributes in process `syz-executor5'.
01:21:01 executing program 2:
pipe(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000380)=0x13, 0x4)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000000)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x6, 0x0)
accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f0000000180)=0x1c, 0x800)
r4 = geteuid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000003c0))
lchown(&(0x7f0000000200)='./file0\x00', r4, 0x0)
connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = accept4(r0, 0x0, &(0x7f0000000000), 0x0)
setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x4)
sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffff9c, 0xae78, &(0x7f00000000c0))
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8)
setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000001c0)={@loopback, r6}, 0x14)

01:21:01 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040))
ppoll(&(0x7f0000000540)=[{r2}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x74eda5c2})

[  582.109314] netlink: 26 bytes leftover after parsing attributes in process `syz-executor5'.
01:21:02 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040))
ppoll(&(0x7f0000000540)=[{r2}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x74eda5c2})

01:21:02 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x0, 0x2}, 0x20)

01:21:02 executing program 4:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xffffffea)
r2 = epoll_create(0x8)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240))
ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
close(r2)

01:21:02 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x0, 0x2}, 0x20)

01:21:02 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040))
ppoll(&(0x7f0000000540)=[{r2}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x74eda5c2})

01:21:02 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040))
ppoll(&(0x7f0000000540)=[{r2}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x74eda5c2})

01:21:02 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x0, 0x2}, 0x20)

01:21:02 executing program 2:
pipe(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000380)=0x13, 0x4)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000000)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x6, 0x0)
accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f0000000180)=0x1c, 0x800)
r4 = geteuid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000003c0))
lchown(&(0x7f0000000200)='./file0\x00', r4, 0x0)
connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = accept4(r0, 0x0, &(0x7f0000000000), 0x0)
setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x4)
sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffff9c, 0xae78, &(0x7f00000000c0))
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8)
setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000001c0)={@loopback, r6}, 0x14)

01:21:02 executing program 1:
pipe(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000380)=0x13, 0x4)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000000)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x6, 0x0)
accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f0000000180)=0x1c, 0x800)
r4 = geteuid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000003c0))
lchown(&(0x7f0000000200)='./file0\x00', r4, 0x0)
connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = accept4(r0, 0x0, &(0x7f0000000000), 0x0)
setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x4)
sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffff9c, 0xae78, &(0x7f00000000c0))
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8)
setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000001c0)={@loopback, r6}, 0x14)

01:21:03 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x0, 0x2}, 0x20)

01:21:03 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl(r1, 0xfffffff7bfffffa6, 0x0)

01:21:03 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x2, 0x3}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), 0x0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f0000000040), 0x0}, 0x18)

01:21:03 executing program 5:
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000000)="738ff751189d70b015b8a6a3bfe7c8ed745c510c11ccaa20", 0x18, 0xfffffffffffffffe)

01:21:03 executing program 4:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xffffffea)
r2 = epoll_create(0x8)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240))
ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
close(r2)

[  583.764091] encrypted_key: master key parameter '' is invalid
01:21:03 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
fcntl$getown(r1, 0x9)
sendmsg$rds(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), &(0x7f0000000ec0)}}], 0x58}, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'vlan0\x00', 0xd803})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @local}})
socketpair(0x11, 0x0, 0x10000, 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
dup3(r2, r3, 0x0)

01:21:03 executing program 0:
unshare(0x8000400)
r0 = mq_open(&(0x7f0000000100)='user#vboxnet1\x00', 0x6e93ebbbcc0884f1, 0x0, 0x0)
mq_getsetattr(r0, &(0x7f0000000040), 0x0)

[  583.861983] encrypted_key: master key parameter '' is invalid
01:21:03 executing program 5:
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
preadv(r0, &(0x7f00000017c0), 0x389, 0x0)

01:21:03 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
fcntl$getown(r1, 0x9)
sendmsg$rds(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), &(0x7f0000000ec0)}}], 0x58}, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'vlan0\x00', 0xd803})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @local}})
socketpair(0x11, 0x0, 0x10000, 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
dup3(r2, r3, 0x0)

[  584.056934] atomic_op 000000009acd11de conn xmit_atomic           (null)
01:21:03 executing program 2:
pipe(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000380)=0x13, 0x4)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000000)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x6, 0x0)
accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f0000000180)=0x1c, 0x800)
r4 = geteuid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000003c0))
lchown(&(0x7f0000000200)='./file0\x00', r4, 0x0)
connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = accept4(r0, 0x0, &(0x7f0000000000), 0x0)
setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x4)
sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffff9c, 0xae78, &(0x7f00000000c0))
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8)
setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000001c0)={@loopback, r6}, 0x14)

01:21:03 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2)
write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x36e)
ioctl$SG_GET_REQUEST_TABLE(r0, 0x227c, 0x0)

01:21:04 executing program 1:
pipe(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000380)=0x13, 0x4)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000000)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x6, 0x0)
accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f0000000180)=0x1c, 0x800)
r4 = geteuid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000003c0))
lchown(&(0x7f0000000200)='./file0\x00', r4, 0x0)
connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = accept4(r0, 0x0, &(0x7f0000000000), 0x0)
setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x4)
sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffff9c, 0xae78, &(0x7f00000000c0))
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8)
setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000001c0)={@loopback, r6}, 0x14)

01:21:04 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video0\x00', 0x2, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f0000000340), 0x41395527)
openat$userio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/userio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x100000000000, &(0x7f0000000040)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  584.305392] atomic_op 0000000064ab5d47 conn xmit_atomic           (null)
01:21:04 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
fcntl$getown(r1, 0x9)
sendmsg$rds(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), &(0x7f0000000ec0)}}], 0x58}, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'vlan0\x00', 0xd803})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @local}})
socketpair(0x11, 0x0, 0x10000, 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
dup3(r2, r3, 0x0)

[  584.594211] atomic_op 00000000dccfd30c conn xmit_atomic           (null)
01:21:04 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
fcntl$getown(r1, 0x9)
sendmsg$rds(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), &(0x7f0000000ec0)}}], 0x58}, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'vlan0\x00', 0xd803})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @local}})
socketpair(0x11, 0x0, 0x10000, 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
dup3(r2, r3, 0x0)

01:21:04 executing program 4:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000880), 0x9, 0x0, &(0x7f00000008c0)={0x0, 0x1c9c380}, &(0x7f0000000900)=0x2, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00')
ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000040)=0x9)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x0, 0x0, 0x6d, 0x20000000000014, 0x0, 0x0}, 0x1db)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00b47edb064827b56ce305640e52"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000003c0)={0x84, @local, 0x0, 0x0, 'mh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', 0x20000000000, 0x0, 0x800}, 0x2c)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x16, 0x8, "9b93d7a7e4fb39daab332f2646ffb445fad3e6c64c7d19642a6510b05534a93dd1a7783832ccacc5a22e5745656880afdcaa3e913561c539a8dd796454a735b0", "46e63151428224c434353aedc66eb25afeb82377b1c529267d29919b97a34529", [0x9, 0x3f]})
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x6, 0x9}, &(0x7f0000000380)=0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe0, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x6c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa26}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100000000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000045)
poll(&(0x7f0000000440)=[{r5}, {r8, 0x4208}, {r0, 0x401}, {r3, 0x2}, {r6, 0x109}], 0x5, 0x3ff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000140)="14"})
mmap$binder(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xc1010, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x44, 0x0, &(0x7f0000000000)=[@transaction={0x40406300, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f00000005c0), &(0x7f0000000600)=[0x48, 0x45c2fd6a264ae34a, 0x28, 0x38]}}], 0x0, 0x0, &(0x7f0000000300)})
mlock(&(0x7f0000001000/0x3000)=nil, 0x3000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000940)='IPVS\x00')
fsetxattr$security_selinux(r2, &(0x7f0000000980)='security.selinux\x00', &(0x7f00000009c0)='system_u:object_r:vmware_device_t:s0\x00', 0x25, 0x1)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200))
syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x7, 0x101000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x64, 0x5, {"464202afd9d101064e49a9d038291249e2bdea44c5265c3ac4534bded4885e6f23330b35a81642e844e6aa771303f8b80ddbcf21ad3ebb8e359d5baeb10640bac53b1214ba385024b81efae3"}}, {0x0, "915d192e4015f668ca23e7bb6fb68df4b9879bd65b062e5750f8a6170476bf16dd7dd925c5643a9c54ad847f6c6084941c6506e87e9c746a4e65b2654cb70a01343e77c3b119540090781fd610b17d47c3092aad866d2ea01356e08a06641c580e6e364f39844f689faad1e829e75d488fad9eccbeae25f2"}}, 0x0, 0xde}, 0x20)

01:21:04 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000005880)='/dev/dlm-monitor\x00', 0x0, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0)
close(r1)

[  584.816617] atomic_op 00000000a400bde4 conn xmit_atomic           (null)
01:21:04 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x0, 0x0, 0x6, 0x80}, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0)
vmsplice(r0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x0, @multicast1}], 0x2c)
r1 = dup(0xffffffffffffff9c)
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000380)={0x0, 0x0})
connect(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x1000000000002, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000280)={0x0, 0x100000001})
openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

01:21:04 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x11, 0x4, 0x4, 0xf59, 0x80}, 0x2c)

01:21:04 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video0\x00', 0x2, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f0000000340), 0x41395527)
openat$userio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/userio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x100000000000, &(0x7f0000000040)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  585.024709] binder: 23793:23807 got transaction with invalid offset (72, min 0 max 0) or object.
[  585.059611] binder: 23793:23807 transaction failed 29201/-22, size 0-32 line 3097
01:21:04 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x18, r1, 0x107, 0x0, 0x0, {0x5}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0)

01:21:04 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setfsuid(0x0)
mq_notify(0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0)
r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001740)='/dev/vhci\x00', 0x200)
ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000001880)=ANY=[])
creat(&(0x7f0000000080)='./file1/file0\x00', 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
syz_open_dev$vcsa(0x0, 0x1, 0x0)
r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)=0x80000002)
process_vm_writev(r0, &(0x7f0000001580)=[{&(0x7f00000002c0)=""/38, 0x26}, {&(0x7f0000000400)=""/118, 0x76}, {0x0}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000340)=""/34, 0x22}], 0x5, &(0x7f0000001700)=[{&(0x7f00000016c0)=""/61, 0x3d}], 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x13f, 0x3}}, 0x20)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0xffffffffffffffd3, 0x34, 0x100000000000000}, 0xfffffefd)
ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000080)={0x5, 0x80000000, 0x0, 0x10001})
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

01:21:05 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="a58dc0b1814599219a89c417fe2800001701400d00011f5bb73ffb21f6ca2e2f66696c65052f66696c6555a30d34b9ad143996775e4e751d229a9b16226b01a8937bdcd4789c45"], 0x47)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
socket$unix(0x1, 0x3, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0)
fchdir(r1)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0)
write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0x7ff, &(0x7f0000000240)=<r3=>0x0)
getpgrp(0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000500))
r4 = getpgrp(0xffffffffffffffff)
getpgid(r4)
r5 = gettid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000540)=0xc)
gettid()
getpgid(r5)
io_cancel(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f0000000340)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c5", 0x73, 0x8, 0x0, 0x1, 0xffffffffffffff9c}, 0x0)
mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1)
r6 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe)
keyctl$update(0x2, r6, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x7f, 0x3}, 0x8)
r7 = open(&(0x7f00000005c0)='./file0/file0\x00', 0x200, 0x2)
dup2(r7, 0xffffffffffffffff)
fdatasync(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000480)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0xfdef)

01:21:05 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fgetxattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f0000003b40)=""/5, 0x5)

[  585.323406] overlayfs: missing 'lowerdir'
01:21:05 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x0, 0x0, 0x6, 0x80}, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0)
vmsplice(r0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x0, @multicast1}], 0x2c)
r1 = dup(0xffffffffffffff9c)
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000380)={0x0, 0x0})
connect(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x1000000000002, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000280)={0x0, 0x100000001})
openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

01:21:05 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fgetxattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f0000003b40)=""/5, 0x5)

01:21:05 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="a58dc0b1814599219a89c417fe2800001701400d00011f5bb73ffb21f6ca2e2f66696c65052f66696c6555a30d34b9ad143996775e4e751d229a9b16226b01a8937bdcd4789c45"], 0x47)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
socket$unix(0x1, 0x3, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0)
fchdir(r1)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0)
write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0x7ff, &(0x7f0000000240)=<r3=>0x0)
getpgrp(0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000500))
r4 = getpgrp(0xffffffffffffffff)
getpgid(r4)
r5 = gettid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000540)=0xc)
gettid()
getpgid(r5)
io_cancel(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f0000000340)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c5", 0x73, 0x8, 0x0, 0x1, 0xffffffffffffff9c}, 0x0)
mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1)
r6 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe)
keyctl$update(0x2, r6, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x7f, 0x3}, 0x8)
r7 = open(&(0x7f00000005c0)='./file0/file0\x00', 0x200, 0x2)
dup2(r7, 0xffffffffffffffff)
fdatasync(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000480)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0xfdef)

[  585.667889] binder: BINDER_SET_CONTEXT_MGR already set
[  585.686795] binder: 23793:23811 ioctl 40046207 0 returned -16
[  585.708542] binder_alloc: 23793: binder_alloc_buf, no vma
[  585.733562] binder: 23793:23807 transaction failed 29189/-3, size 0-32 line 3035
[  585.743351] binder: undelivered TRANSACTION_ERROR: 29201
[  585.829306] attempt to access beyond end of device
[  585.842563] loop2: rw=1, want=130, limit=112
[  585.857839] Buffer I/O error on dev loop2, logical block 129, lost async page write
[  585.873793] attempt to access beyond end of device
[  585.879325] loop2: rw=1, want=131, limit=112
[  585.883909] Buffer I/O error on dev loop2, logical block 130, lost async page write
[  585.892160] attempt to access beyond end of device
[  585.897603] loop2: rw=1, want=132, limit=112
[  585.902190] Buffer I/O error on dev loop2, logical block 131, lost async page write
[  585.910412] attempt to access beyond end of device
[  585.920064] loop2: rw=1, want=133, limit=112
[  585.926329] audit: type=1804 audit(1548120065.733:144): pid=23851 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor2" name="/syzcgroup/unified/syz2/file0/file0" dev="loop2" ino=46 res=1
[  585.956653] binder: undelivered TRANSACTION_ERROR: 29189
01:21:05 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x0, 0x0, 0x6, 0x80}, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0)
vmsplice(r0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x0, @multicast1}], 0x2c)
r1 = dup(0xffffffffffffff9c)
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000380)={0x0, 0x0})
connect(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x1000000000002, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000280)={0x0, 0x100000001})
openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

01:21:05 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fgetxattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f0000003b40)=""/5, 0x5)

01:21:05 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video0\x00', 0x2, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f0000000340), 0x41395527)
openat$userio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/userio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x100000000000, &(0x7f0000000040)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)

01:21:05 executing program 4:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000880), 0x9, 0x0, &(0x7f00000008c0)={0x0, 0x1c9c380}, &(0x7f0000000900)=0x2, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00')
ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000040)=0x9)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x0, 0x0, 0x6d, 0x20000000000014, 0x0, 0x0}, 0x1db)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00b47edb064827b56ce305640e52"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000003c0)={0x84, @local, 0x0, 0x0, 'mh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', 0x20000000000, 0x0, 0x800}, 0x2c)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x16, 0x8, "9b93d7a7e4fb39daab332f2646ffb445fad3e6c64c7d19642a6510b05534a93dd1a7783832ccacc5a22e5745656880afdcaa3e913561c539a8dd796454a735b0", "46e63151428224c434353aedc66eb25afeb82377b1c529267d29919b97a34529", [0x9, 0x3f]})
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x6, 0x9}, &(0x7f0000000380)=0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe0, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x6c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa26}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100000000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000045)
poll(&(0x7f0000000440)=[{r5}, {r8, 0x4208}, {r0, 0x401}, {r3, 0x2}, {r6, 0x109}], 0x5, 0x3ff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000140)="14"})
mmap$binder(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xc1010, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x44, 0x0, &(0x7f0000000000)=[@transaction={0x40406300, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f00000005c0), &(0x7f0000000600)=[0x48, 0x45c2fd6a264ae34a, 0x28, 0x38]}}], 0x0, 0x0, &(0x7f0000000300)})
mlock(&(0x7f0000001000/0x3000)=nil, 0x3000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000940)='IPVS\x00')
fsetxattr$security_selinux(r2, &(0x7f0000000980)='security.selinux\x00', &(0x7f00000009c0)='system_u:object_r:vmware_device_t:s0\x00', 0x25, 0x1)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200))
syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x7, 0x101000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x64, 0x5, {"464202afd9d101064e49a9d038291249e2bdea44c5265c3ac4534bded4885e6f23330b35a81642e844e6aa771303f8b80ddbcf21ad3ebb8e359d5baeb10640bac53b1214ba385024b81efae3"}}, {0x0, "915d192e4015f668ca23e7bb6fb68df4b9879bd65b062e5750f8a6170476bf16dd7dd925c5643a9c54ad847f6c6084941c6506e87e9c746a4e65b2654cb70a01343e77c3b119540090781fd610b17d47c3092aad866d2ea01356e08a06641c580e6e364f39844f689faad1e829e75d488fad9eccbeae25f2"}}, 0x0, 0xde}, 0x20)

[  585.983805] Buffer I/O error on dev loop2, logical block 132, lost async page write
[  586.010337] attempt to access beyond end of device
[  586.015410] loop2: rw=1, want=142, limit=112
[  586.024334] Buffer I/O error on dev loop2, logical block 141, lost async page write
[  586.061797] attempt to access beyond end of device
[  586.080496] loop2: rw=1, want=143, limit=112
[  586.096609] Buffer I/O error on dev loop2, logical block 142, lost async page write
01:21:05 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fgetxattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f0000003b40)=""/5, 0x5)

[  586.126218] attempt to access beyond end of device
[  586.140981] loop2: rw=1, want=144, limit=112
[  586.151438] Buffer I/O error on dev loop2, logical block 143, lost async page write
[  586.162735] attempt to access beyond end of device
01:21:06 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x0, 0x0, 0x6, 0x80}, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0)
vmsplice(r0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x0, @multicast1}], 0x2c)
r1 = dup(0xffffffffffffff9c)
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000380)={0x0, 0x0})
connect(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x1000000000002, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000280)={0x0, 0x100000001})
openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

[  586.175268] loop2: rw=1, want=145, limit=112
[  586.182478] Buffer I/O error on dev loop2, logical block 144, lost async page write
[  586.271877] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
01:21:06 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setfsuid(0x0)
mq_notify(0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0)
r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001740)='/dev/vhci\x00', 0x200)
ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000001880)=ANY=[])
creat(&(0x7f0000000080)='./file1/file0\x00', 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
syz_open_dev$vcsa(0x0, 0x1, 0x0)
r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)=0x80000002)
process_vm_writev(r0, &(0x7f0000001580)=[{&(0x7f00000002c0)=""/38, 0x26}, {&(0x7f0000000400)=""/118, 0x76}, {0x0}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000340)=""/34, 0x22}], 0x5, &(0x7f0000001700)=[{&(0x7f00000016c0)=""/61, 0x3d}], 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x13f, 0x3}}, 0x20)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0xffffffffffffffd3, 0x34, 0x100000000000000}, 0xfffffefd)
ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000080)={0x5, 0x80000000, 0x0, 0x10001})
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

01:21:06 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="a58dc0b1814599219a89c417fe2800001701400d00011f5bb73ffb21f6ca2e2f66696c65052f66696c6555a30d34b9ad143996775e4e751d229a9b16226b01a8937bdcd4789c45"], 0x47)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
socket$unix(0x1, 0x3, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0)
fchdir(r1)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0)
write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0x7ff, &(0x7f0000000240)=<r3=>0x0)
getpgrp(0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000500))
r4 = getpgrp(0xffffffffffffffff)
getpgid(r4)
r5 = gettid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000540)=0xc)
gettid()
getpgid(r5)
io_cancel(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f0000000340)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c5", 0x73, 0x8, 0x0, 0x1, 0xffffffffffffff9c}, 0x0)
mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1)
r6 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe)
keyctl$update(0x2, r6, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x7f, 0x3}, 0x8)
r7 = open(&(0x7f00000005c0)='./file0/file0\x00', 0x200, 0x2)
dup2(r7, 0xffffffffffffffff)
fdatasync(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000480)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0xfdef)

[  586.342638] FAT-fs (loop2): Filesystem has been set read-only
[  586.353597] binder: 23862:23871 got transaction with invalid offset (72, min 0 max 0) or object.
[  586.379010] binder: 23862:23871 transaction failed 29201/-22, size 0-32 line 3097
01:21:06 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setfsuid(0x0)
mq_notify(0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0)
r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001740)='/dev/vhci\x00', 0x200)
ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000001880)=ANY=[])
creat(&(0x7f0000000080)='./file1/file0\x00', 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
syz_open_dev$vcsa(0x0, 0x1, 0x0)
r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)=0x80000002)
process_vm_writev(r0, &(0x7f0000001580)=[{&(0x7f00000002c0)=""/38, 0x26}, {&(0x7f0000000400)=""/118, 0x76}, {0x0}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000340)=""/34, 0x22}], 0x5, &(0x7f0000001700)=[{&(0x7f00000016c0)=""/61, 0x3d}], 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x13f, 0x3}}, 0x20)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0xffffffffffffffd3, 0x34, 0x100000000000000}, 0xfffffefd)
ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000080)={0x5, 0x80000000, 0x0, 0x10001})
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

[  586.470556] overlayfs: missing 'lowerdir'
01:21:06 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="a58dc0b1814599219a89c417fe2800001701400d00011f5bb73ffb21f6ca2e2f66696c65052f66696c6555a30d34b9ad143996775e4e751d229a9b16226b01a8937bdcd4789c45"], 0x47)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
socket$unix(0x1, 0x3, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0)
fchdir(r1)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0)
write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0x7ff, &(0x7f0000000240)=<r3=>0x0)
getpgrp(0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000500))
r4 = getpgrp(0xffffffffffffffff)
getpgid(r4)
r5 = gettid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000540)=0xc)
gettid()
getpgid(r5)
io_cancel(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f0000000340)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c5", 0x73, 0x8, 0x0, 0x1, 0xffffffffffffff9c}, 0x0)
mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1)
r6 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe)
keyctl$update(0x2, r6, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x7f, 0x3}, 0x8)
r7 = open(&(0x7f00000005c0)='./file0/file0\x00', 0x200, 0x2)
dup2(r7, 0xffffffffffffffff)
fdatasync(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000480)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0xfdef)

01:21:06 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="a58dc0b1814599219a89c417fe2800001701400d00011f5bb73ffb21f6ca2e2f66696c65052f66696c6555a30d34b9ad143996775e4e751d229a9b16226b01a8937bdcd4789c45"], 0x47)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
socket$unix(0x1, 0x3, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0)
fchdir(r1)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0)
write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0x7ff, &(0x7f0000000240)=<r3=>0x0)
getpgrp(0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000500))
r4 = getpgrp(0xffffffffffffffff)
getpgid(r4)
r5 = gettid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000540)=0xc)
gettid()
getpgid(r5)
io_cancel(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f0000000340)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c5", 0x73, 0x8, 0x0, 0x1, 0xffffffffffffff9c}, 0x0)
mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1)
r6 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe)
keyctl$update(0x2, r6, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x7f, 0x3}, 0x8)
r7 = open(&(0x7f00000005c0)='./file0/file0\x00', 0x200, 0x2)
dup2(r7, 0xffffffffffffffff)
fdatasync(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000480)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0xfdef)

[  586.684444] overlayfs: missing 'lowerdir'
01:21:06 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video0\x00', 0x2, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f0000000340), 0x41395527)
openat$userio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/userio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x100000000000, &(0x7f0000000040)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  586.993302] binder: undelivered TRANSACTION_ERROR: 29201
01:21:06 executing program 4:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000880), 0x9, 0x0, &(0x7f00000008c0)={0x0, 0x1c9c380}, &(0x7f0000000900)=0x2, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00')
ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000040)=0x9)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x0, 0x0, 0x6d, 0x20000000000014, 0x0, 0x0}, 0x1db)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00b47edb064827b56ce305640e52"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000003c0)={0x84, @local, 0x0, 0x0, 'mh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', 0x20000000000, 0x0, 0x800}, 0x2c)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x16, 0x8, "9b93d7a7e4fb39daab332f2646ffb445fad3e6c64c7d19642a6510b05534a93dd1a7783832ccacc5a22e5745656880afdcaa3e913561c539a8dd796454a735b0", "46e63151428224c434353aedc66eb25afeb82377b1c529267d29919b97a34529", [0x9, 0x3f]})
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x6, 0x9}, &(0x7f0000000380)=0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe0, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x6c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa26}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100000000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000045)
poll(&(0x7f0000000440)=[{r5}, {r8, 0x4208}, {r0, 0x401}, {r3, 0x2}, {r6, 0x109}], 0x5, 0x3ff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000140)="14"})
mmap$binder(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xc1010, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x44, 0x0, &(0x7f0000000000)=[@transaction={0x40406300, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f00000005c0), &(0x7f0000000600)=[0x48, 0x45c2fd6a264ae34a, 0x28, 0x38]}}], 0x0, 0x0, &(0x7f0000000300)})
mlock(&(0x7f0000001000/0x3000)=nil, 0x3000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000940)='IPVS\x00')
fsetxattr$security_selinux(r2, &(0x7f0000000980)='security.selinux\x00', &(0x7f00000009c0)='system_u:object_r:vmware_device_t:s0\x00', 0x25, 0x1)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200))
syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x7, 0x101000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x64, 0x5, {"464202afd9d101064e49a9d038291249e2bdea44c5265c3ac4534bded4885e6f23330b35a81642e844e6aa771303f8b80ddbcf21ad3ebb8e359d5baeb10640bac53b1214ba385024b81efae3"}}, {0x0, "915d192e4015f668ca23e7bb6fb68df4b9879bd65b062e5750f8a6170476bf16dd7dd925c5643a9c54ad847f6c6084941c6506e87e9c746a4e65b2654cb70a01343e77c3b119540090781fd610b17d47c3092aad866d2ea01356e08a06641c580e6e364f39844f689faad1e829e75d488fad9eccbeae25f2"}}, 0x0, 0xde}, 0x20)

01:21:06 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="a58dc0b1814599219a89c417fe2800001701400d00011f5bb73ffb21f6ca2e2f66696c65052f66696c6555a30d34b9ad143996775e4e751d229a9b16226b01a8937bdcd4789c45"], 0x47)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
socket$unix(0x1, 0x3, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0)
fchdir(r1)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0)
write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0x7ff, &(0x7f0000000240)=<r3=>0x0)
getpgrp(0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000500))
r4 = getpgrp(0xffffffffffffffff)
getpgid(r4)
r5 = gettid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000540)=0xc)
gettid()
getpgid(r5)
io_cancel(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f0000000340)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c5", 0x73, 0x8, 0x0, 0x1, 0xffffffffffffff9c}, 0x0)
mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1)
r6 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe)
keyctl$update(0x2, r6, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x7f, 0x3}, 0x8)
r7 = open(&(0x7f00000005c0)='./file0/file0\x00', 0x200, 0x2)
dup2(r7, 0xffffffffffffffff)
fdatasync(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000480)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0xfdef)

01:21:06 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="a58dc0b1814599219a89c417fe2800001701400d00011f5bb73ffb21f6ca2e2f66696c65052f66696c6555a30d34b9ad143996775e4e751d229a9b16226b01a8937bdcd4789c45"], 0x47)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
socket$unix(0x1, 0x3, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0)
fchdir(r1)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0)
write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0x7ff, &(0x7f0000000240)=<r3=>0x0)
getpgrp(0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000500))
r4 = getpgrp(0xffffffffffffffff)
getpgid(r4)
r5 = gettid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000540)=0xc)
gettid()
getpgid(r5)
io_cancel(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f0000000340)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c5", 0x73, 0x8, 0x0, 0x1, 0xffffffffffffff9c}, 0x0)
mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1)
r6 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe)
keyctl$update(0x2, r6, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x7f, 0x3}, 0x8)
r7 = open(&(0x7f00000005c0)='./file0/file0\x00', 0x200, 0x2)
dup2(r7, 0xffffffffffffffff)
fdatasync(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000480)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0xfdef)

01:21:07 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setfsuid(0x0)
mq_notify(0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0)
r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001740)='/dev/vhci\x00', 0x200)
ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000001880)=ANY=[])
creat(&(0x7f0000000080)='./file1/file0\x00', 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
syz_open_dev$vcsa(0x0, 0x1, 0x0)
r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)=0x80000002)
process_vm_writev(r0, &(0x7f0000001580)=[{&(0x7f00000002c0)=""/38, 0x26}, {&(0x7f0000000400)=""/118, 0x76}, {0x0}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000340)=""/34, 0x22}], 0x5, &(0x7f0000001700)=[{&(0x7f00000016c0)=""/61, 0x3d}], 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x13f, 0x3}}, 0x20)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0xffffffffffffffd3, 0x34, 0x100000000000000}, 0xfffffefd)
ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000080)={0x5, 0x80000000, 0x0, 0x10001})
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

[  587.360359] binder: 23905:23908 got transaction with invalid offset (72, min 0 max 0) or object.
01:21:07 executing program 2:
pipe2(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_matches\x00')
sendfile(r0, r2, &(0x7f0000000000)=0x2f, 0x80000001)

[  587.405322] binder: 23905:23908 transaction failed 29201/-22, size 0-32 line 3097
01:21:07 executing program 5:
r0 = socket$kcm(0x10, 0x800000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80fffffff05e510befccd7", 0x2e}], 0x1}, 0x0)

[  587.462257] overlayfs: missing 'lowerdir'
[  587.524167] netlink: 'syz-executor5': attribute type 29 has an invalid length.
[  587.555596] netlink: 'syz-executor5': attribute type 29 has an invalid length.
01:21:07 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
r2 = socket(0x200000000000011, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14)
io_setup(0x7, &(0x7f00000000c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0, 0x2d5}])

01:21:07 executing program 5:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x10000014c)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

[  587.621538] binder: undelivered TRANSACTION_ERROR: 29201
01:21:07 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setfsuid(0x0)
mq_notify(0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0)
r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001740)='/dev/vhci\x00', 0x200)
ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000001880)=ANY=[])
creat(&(0x7f0000000080)='./file1/file0\x00', 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
syz_open_dev$vcsa(0x0, 0x1, 0x0)
r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)=0x80000002)
process_vm_writev(r0, &(0x7f0000001580)=[{&(0x7f00000002c0)=""/38, 0x26}, {&(0x7f0000000400)=""/118, 0x76}, {0x0}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000340)=""/34, 0x22}], 0x5, &(0x7f0000001700)=[{&(0x7f00000016c0)=""/61, 0x3d}], 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x13f, 0x3}}, 0x20)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0xffffffffffffffd3, 0x34, 0x100000000000000}, 0xfffffefd)
ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000080)={0x5, 0x80000000, 0x0, 0x10001})
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

01:21:07 executing program 4:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000880), 0x9, 0x0, &(0x7f00000008c0)={0x0, 0x1c9c380}, &(0x7f0000000900)=0x2, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00')
ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000040)=0x9)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x0, 0x0, 0x6d, 0x20000000000014, 0x0, 0x0}, 0x1db)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00b47edb064827b56ce305640e52"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000003c0)={0x84, @local, 0x0, 0x0, 'mh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', 0x20000000000, 0x0, 0x800}, 0x2c)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x16, 0x8, "9b93d7a7e4fb39daab332f2646ffb445fad3e6c64c7d19642a6510b05534a93dd1a7783832ccacc5a22e5745656880afdcaa3e913561c539a8dd796454a735b0", "46e63151428224c434353aedc66eb25afeb82377b1c529267d29919b97a34529", [0x9, 0x3f]})
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x6, 0x9}, &(0x7f0000000380)=0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe0, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x6c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa26}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100000000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000045)
poll(&(0x7f0000000440)=[{r5}, {r8, 0x4208}, {r0, 0x401}, {r3, 0x2}, {r6, 0x109}], 0x5, 0x3ff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000140)="14"})
mmap$binder(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xc1010, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x44, 0x0, &(0x7f0000000000)=[@transaction={0x40406300, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f00000005c0), &(0x7f0000000600)=[0x48, 0x45c2fd6a264ae34a, 0x28, 0x38]}}], 0x0, 0x0, &(0x7f0000000300)})
mlock(&(0x7f0000001000/0x3000)=nil, 0x3000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000940)='IPVS\x00')
fsetxattr$security_selinux(r2, &(0x7f0000000980)='security.selinux\x00', &(0x7f00000009c0)='system_u:object_r:vmware_device_t:s0\x00', 0x25, 0x1)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200))
syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x7, 0x101000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x64, 0x5, {"464202afd9d101064e49a9d038291249e2bdea44c5265c3ac4534bded4885e6f23330b35a81642e844e6aa771303f8b80ddbcf21ad3ebb8e359d5baeb10640bac53b1214ba385024b81efae3"}}, {0x0, "915d192e4015f668ca23e7bb6fb68df4b9879bd65b062e5750f8a6170476bf16dd7dd925c5643a9c54ad847f6c6084941c6506e87e9c746a4e65b2654cb70a01343e77c3b119540090781fd610b17d47c3092aad866d2ea01356e08a06641c580e6e364f39844f689faad1e829e75d488fad9eccbeae25f2"}}, 0x0, 0xde}, 0x20)

[  587.762084] binder: 23931:23937 ioctl 6612 0 returned -22
01:21:07 executing program 0:
r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0x100000073)
read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3)

[  587.858689] overlayfs: missing 'lowerdir'
01:21:07 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
r2 = socket(0x200000000000011, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14)
io_setup(0x7, &(0x7f00000000c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0, 0x2d5}])

[  587.927038] binder: 23938:23947 got transaction with invalid offset (72, min 0 max 0) or object.
[  587.985967] binder: 23938:23947 transaction failed 29201/-22, size 0-32 line 3097
01:21:08 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
r2 = socket(0x200000000000011, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14)
io_setup(0x7, &(0x7f00000000c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0, 0x2d5}])

01:21:08 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
r2 = socket(0x200000000000011, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14)
io_setup(0x7, &(0x7f00000000c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0, 0x2d5}])

[  588.462942] binder: 23931:23932 ioctl 6612 0 returned -22
01:21:08 executing program 5:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x10000014c)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

01:21:08 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setfsuid(0x0)
mq_notify(0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0)
r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001740)='/dev/vhci\x00', 0x200)
ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000001880)=ANY=[])
creat(&(0x7f0000000080)='./file1/file0\x00', 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
syz_open_dev$vcsa(0x0, 0x1, 0x0)
r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)=0x80000002)
process_vm_writev(r0, &(0x7f0000001580)=[{&(0x7f00000002c0)=""/38, 0x26}, {&(0x7f0000000400)=""/118, 0x76}, {0x0}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000340)=""/34, 0x22}], 0x5, &(0x7f0000001700)=[{&(0x7f00000016c0)=""/61, 0x3d}], 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x13f, 0x3}}, 0x20)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0xffffffffffffffd3, 0x34, 0x100000000000000}, 0xfffffefd)
ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000080)={0x5, 0x80000000, 0x0, 0x10001})
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

01:21:08 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setfsuid(0x0)
mq_notify(0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0)
r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001740)='/dev/vhci\x00', 0x200)
ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000001880)=ANY=[])
creat(&(0x7f0000000080)='./file1/file0\x00', 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
syz_open_dev$vcsa(0x0, 0x1, 0x0)
r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)=0x80000002)
process_vm_writev(r0, &(0x7f0000001580)=[{&(0x7f00000002c0)=""/38, 0x26}, {&(0x7f0000000400)=""/118, 0x76}, {0x0}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000340)=""/34, 0x22}], 0x5, &(0x7f0000001700)=[{&(0x7f00000016c0)=""/61, 0x3d}], 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x13f, 0x3}}, 0x20)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0xffffffffffffffd3, 0x34, 0x100000000000000}, 0xfffffefd)
ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000080)={0x5, 0x80000000, 0x0, 0x10001})
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

[  588.606290] binder: undelivered TRANSACTION_ERROR: 29201
01:21:08 executing program 4:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x10000014c)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

01:21:08 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
ioctl$TCSETAF(r0, 0x402c542c, &(0x7f0000000040))

[  588.704644] binder: 23962:23968 ioctl 6612 0 returned -22
01:21:08 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'new '}, 0xffa8, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe)

[  588.872828] binder: 23972:23982 ioctl 6612 0 returned -22
[  588.887227] overlayfs: missing 'lowerdir'
01:21:08 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000000)="2e0000002500817ee45ae087185082cf1024b0eba06ec400002339e00586f9835b3f0016914879008cd90080e230", 0x2e}], 0x1}, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, 0x0, 0x0)

[  588.913419] overlayfs: missing 'lowerdir'
[  588.968574] encrypted_key: keyword 'update' not allowed when called from .instantiate method
[  589.029065] encrypted_key: keyword 'update' not allowed when called from .instantiate method
[  589.071895] netlink: 26 bytes leftover after parsing attributes in process `syz-executor0'.
01:21:08 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'new '}, 0xffa8, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe)

[  589.165626] netlink: 26 bytes leftover after parsing attributes in process `syz-executor0'.
01:21:09 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000000)="2e0000002500817ee45ae087185082cf1024b0eba06ec400002339e00586f9835b3f0016914879008cd90080e230", 0x2e}], 0x1}, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, 0x0, 0x0)

[  589.345219] encrypted_key: keyword 'update' not allowed when called from .instantiate method
[  589.453712] netlink: 26 bytes leftover after parsing attributes in process `syz-executor0'.
01:21:09 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'new '}, 0xffa8, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe)

01:21:09 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000000)="2e0000002500817ee45ae087185082cf1024b0eba06ec400002339e00586f9835b3f0016914879008cd90080e230", 0x2e}], 0x1}, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, 0x0, 0x0)

01:21:09 executing program 5:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x10000014c)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

[  589.716033] netlink: 26 bytes leftover after parsing attributes in process `syz-executor0'.
[  589.750588] encrypted_key: keyword 'update' not allowed when called from .instantiate method
01:21:09 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000000)="2e0000002500817ee45ae087185082cf1024b0eba06ec400002339e00586f9835b3f0016914879008cd90080e230", 0x2e}], 0x1}, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, 0x0, 0x0)

01:21:09 executing program 1:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x98)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
close(r0)

01:21:09 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'new '}, 0xffa8, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe)

[  589.826683] binder: 24014:24019 ioctl 6612 0 returned -22
[  589.902664] netlink: 26 bytes leftover after parsing attributes in process `syz-executor0'.
[  590.047053] encrypted_key: keyword 'update' not allowed when called from .instantiate method
01:21:09 executing program 4:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x10000014c)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

01:21:09 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x80041284, 0x72f003)

01:21:09 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000180))
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd)
dup2(r0, r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

01:21:09 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
write$binfmt_elf64(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="7f454c460000002f13cd01000000000000000000020000000d000000000000000000000040000000000000000000000000000000160000000000380000000000ff03000000"], 0x45)
recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)

01:21:09 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x200000041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
ptrace(0x10, r1)
ptrace$getsig(0x2, r1, 0xffffffffff600003, &(0x7f0000000000))

01:21:10 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000029000)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000440)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x2, 0xff}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}}, 0x0)

[  590.339726] binder: 24046:24053 ioctl 6612 0 returned -22
01:21:10 executing program 3:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x3, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4004510d, &(0x7f0000000340)={{}, {0x45be}})

01:21:10 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000180))
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd)
dup2(r0, r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

01:21:10 executing program 5:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x10000014c)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

01:21:10 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
write$binfmt_elf64(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="7f454c460000002f13cd01000000000000000000020000000d000000000000000000000040000000000000000000000000000000160000000000380000000000ff03000000"], 0x45)
recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)

01:21:10 executing program 3:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x3, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4004510d, &(0x7f0000000340)={{}, {0x45be}})

01:21:10 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000180))
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd)
dup2(r0, r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

[  590.865885] binder: 24075:24081 ioctl 6612 0 returned -22
01:21:10 executing program 4:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x10000014c)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

01:21:10 executing program 3:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x3, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4004510d, &(0x7f0000000340)={{}, {0x45be}})

01:21:10 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
write$binfmt_elf64(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="7f454c460000002f13cd01000000000000000000020000000d000000000000000000000040000000000000000000000000000000160000000000380000000000ff03000000"], 0x45)
recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)

01:21:10 executing program 3:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x3, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4004510d, &(0x7f0000000340)={{}, {0x45be}})

[  591.151989] binder: 24090:24098 ioctl 6612 0 returned -22
01:21:13 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
write$binfmt_elf64(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="7f454c460000002f13cd01000000000000000000020000000d000000000000000000000040000000000000000000000000000000160000000000380000000000ff03000000"], 0x45)
recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)

01:21:13 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000180))
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd)
dup2(r0, r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

01:21:13 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
write$binfmt_elf64(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="7f454c460000002f13cd01000000000000000000020000000d000000000000000000000040000000000000000000000000000000160000000000380000000000ff03000000"], 0x45)
recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)

01:21:13 executing program 4:
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
sendfile(r0, r2, 0x0, 0x7fffffff)

01:21:13 executing program 2:
fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f0000000040)=@sha1={0x1, "db587d9178ed714ba6ac82317d5f0ac928c8f75e"}, 0x15, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r0, 0xc0045401, &(0x7f0000000080))

01:21:13 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x2, 0x0, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x10001)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x20000000000009)
fallocate(r1, 0x10, 0x0, 0xe439)

01:21:13 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000000b40)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x4}}}]}, 0x38}}, 0x0)

01:21:13 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="f6ff"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
open(0x0, 0x2080, 0x40)
socket$xdp(0x2c, 0x3, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x80000000, 0xfff, 0x0, 0x0, 0x0, 0x3f, 0x1ff}]})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)

01:21:13 executing program 2:
fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f0000000040)=@sha1={0x1, "db587d9178ed714ba6ac82317d5f0ac928c8f75e"}, 0x15, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r0, 0xc0045401, &(0x7f0000000080))

01:21:13 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x2, 0x0, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x10001)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x20000000000009)
fallocate(r1, 0x10, 0x0, 0xe439)

01:21:13 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000000b40)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x4}}}]}, 0x38}}, 0x0)

01:21:13 executing program 1:
perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
syz_open_pts(r0, 0x0)
pipe(&(0x7f00000006c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

01:21:13 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
write$binfmt_elf64(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="7f454c460000002f13cd01000000000000000000020000000d000000000000000000000040000000000000000000000000000000160000000000380000000000ff03000000"], 0x45)
recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)

01:21:13 executing program 2:
fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f0000000040)=@sha1={0x1, "db587d9178ed714ba6ac82317d5f0ac928c8f75e"}, 0x15, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r0, 0xc0045401, &(0x7f0000000080))

01:21:13 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x2, 0x0, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x10001)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x20000000000009)
fallocate(r1, 0x10, 0x0, 0xe439)

01:21:13 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000000b40)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x4}}}]}, 0x38}}, 0x0)

01:21:13 executing program 2:
fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f0000000040)=@sha1={0x1, "db587d9178ed714ba6ac82317d5f0ac928c8f75e"}, 0x15, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r0, 0xc0045401, &(0x7f0000000080))

01:21:13 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x2, 0x0, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x10001)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x20000000000009)
fallocate(r1, 0x10, 0x0, 0xe439)

01:21:13 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000200)={0x7f, 0x0, [0xc0000101, 0x0, 0x11e], [0xc2]})

01:21:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="f6ff"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
open(0x0, 0x2080, 0x40)
socket$xdp(0x2c, 0x3, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x80000000, 0xfff, 0x0, 0x0, 0x0, 0x3f, 0x1ff}]})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)

01:21:14 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000000b40)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x4}}}]}, 0x38}}, 0x0)

[  594.217473] kvm [24175]: vcpu0, guest rIP: 0xfff0 ignored wrmsr: 0x11e data 0x0
01:21:14 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
write$binfmt_elf64(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="7f454c460000002f13cd01000000000000000000020000000d000000000000000000000040000000000000000000000000000000160000000000380000000000ff03000000"], 0x45)
recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)

[  594.274771] kvm [24175]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
01:21:14 executing program 5:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000400))
open$dir(&(0x7f0000000440)='./file0\x00', 0x141c00, 0x121)
fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f0000000200)='TRUE', 0x4, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v1={0x1000000, [{0x2, 0x2}]}, 0xc, 0x0)
clock_getres(0x1, &(0x7f0000000100))
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x40, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1c0000000, 0x0)

01:21:14 executing program 1:
perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
syz_open_pts(r0, 0x0)
pipe(&(0x7f00000006c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

01:21:14 executing program 4:
r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8)
open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
sendfile(r1, r2, 0x0, 0x100)

01:21:14 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000200)={0x7f, 0x0, [0xc0000101, 0x0, 0x11e], [0xc2]})

01:21:14 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000005fdb)="240000001800030307fffd946fa200001c140000feffffff031d8568791ba3a2d188527e", 0x24}], 0x1}, 0x0)

01:21:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="f6ff"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
open(0x0, 0x2080, 0x40)
socket$xdp(0x2c, 0x3, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x80000000, 0xfff, 0x0, 0x0, 0x0, 0x3f, 0x1ff}]})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)

[  594.773462] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'.
01:21:14 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[  594.838029] kvm [24212]: vcpu0, guest rIP: 0xfff0 ignored wrmsr: 0x11e data 0x0
[  594.845622] kvm [24212]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
01:21:14 executing program 4:
r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8)
open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
sendfile(r1, r2, 0x0, 0x100)

01:21:14 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000200)={0x7f, 0x0, [0xc0000101, 0x0, 0x11e], [0xc2]})

[  595.010021] QAT: Invalid ioctl
[  595.025552] QAT: Invalid ioctl
[  595.039403] QAT: Invalid ioctl
[  595.051450] QAT: Invalid ioctl
[  595.061864] QAT: Invalid ioctl
[  595.073171] QAT: Invalid ioctl
[  595.083385] QAT: Invalid ioctl
[  595.094405] QAT: Invalid ioctl
01:21:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="f6ff"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
open(0x0, 0x2080, 0x40)
socket$xdp(0x2c, 0x3, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x80000000, 0xfff, 0x0, 0x0, 0x0, 0x3f, 0x1ff}]})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)

01:21:14 executing program 4:
r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8)
open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
sendfile(r1, r2, 0x0, 0x100)

[  595.114020] QAT: Invalid ioctl
[  595.127680] kvm [24232]: vcpu0, guest rIP: 0xfff0 ignored wrmsr: 0x11e data 0x0
[  595.130968] QAT: Invalid ioctl
[  595.151291] kvm [24232]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
[  595.171825] QAT: Invalid ioctl
[  595.190307] QAT: Invalid ioctl
[  595.216914] QAT: Invalid ioctl
01:21:15 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000200)={0x7f, 0x0, [0xc0000101, 0x0, 0x11e], [0xc2]})

[  595.243771] QAT: Invalid ioctl
[  595.261526] QAT: Invalid ioctl
[  595.280403] QAT: Invalid ioctl
[  595.299999] QAT: Invalid ioctl
[  595.303321] QAT: Invalid ioctl
[  595.324341] QAT: Invalid ioctl
[  595.327815] *** Guest State ***
[  595.342054] QAT: Invalid ioctl
[  595.343600] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  595.378387] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  595.383922] QAT: Invalid ioctl
[  595.397639] QAT: Invalid ioctl
[  595.406507] QAT: Invalid ioctl
01:21:15 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070")
r1 = socket(0x848000000015, 0x805, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x801, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
lstat(0x0, &(0x7f0000000140))
listen(r4, 0x2)
setsockopt$sock_int(r3, 0x1, 0x7, 0x0, 0x0)
setsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0)
listen(r4, 0x0)
accept4(r4, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0)
connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0xe6, 0x40000)
ioctl$RTC_EPOCH_READ(r5, 0x8008700d, &(0x7f0000000300))
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0x60, "bcba7c4053f5f2426d99a26a6eb7ae0547f6dd4b60e5a48fb17aeea959950f2b5f31d258696f8501656d802a3746c6773f3692f74ebf447cc3952d427a4be0692c3830a20954e37fa93f7c264574419c3a234fdd9c6928db3fe7072552a7034d"}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'})
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000200)={0x3e4, 0x10000, 0x83e, 0x80000001, 0x0, 0x3}, 0x0)
getsockopt(r1, 0x114, 0x271b, 0x0, &(0x7f00000002c0))

[  595.427065] QAT: Invalid ioctl
[  595.432818] QAT: Invalid ioctl
[  595.438209] CR3 = 0x0000000000000000
[  595.452650] kvm [24242]: vcpu0, guest rIP: 0xfff0 ignored wrmsr: 0x11e data 0x0
[  595.468185] RSP = 0x0000000000000f80  RIP = 0x0000000000000000
[  595.482513] kvm [24242]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
[  595.492344] RFLAGS=0x00000002         DR7 = 0x0000000000000400
[  595.512141] QAT: Invalid ioctl
[  595.518930] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  595.530642] CS:   sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000
[  595.539469] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  595.545227] QAT: Invalid ioctl
[  595.548053] SS:   sel=0x0000, attr=0x00081, limit=0x0000ffff, base=0x0000000000000000
[  595.559514] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  595.568631] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  595.584610] QAT: Invalid ioctl
[  595.588663] QAT: Invalid ioctl
[  595.589658] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  595.612055] QAT: Invalid ioctl
[  595.626606] GDTR:                           limit=0x000007ff, base=0x0000000000001000
[  595.651119] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800
[  595.674844] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  595.699209] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  595.724449] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  595.744295] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  595.761176] Interruptibility = 00000000  ActivityState = 00000000
[  595.780589] *** Host State ***
[  595.783881] RIP = 0xffffffff811f9920  RSP = 0xffff88801f4f7670
01:21:15 executing program 1:
perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
syz_open_pts(r0, 0x0)
pipe(&(0x7f00000006c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

01:21:15 executing program 4:
r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8)
open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
sendfile(r1, r2, 0x0, 0x100)

01:21:15 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, 0x0)
getpriority(0x0, 0x0)

01:21:15 executing program 2:
socket(0x8000000027, 0x0, 0x0)

[  595.816777] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  595.823760] FSBase=00007f0b841f8700 GSBase=ffff8880ae600000 TRBase=fffffe0000003000
[  595.844503] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
[  595.880269] CR0=0000000080050033 CR3=000000004f5ab000 CR4=00000000001426f0
[  595.903722] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff88001360
01:21:15 executing program 2:
clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff)
r0 = getpid()
migrate_pages(r0, 0x5fb7, 0xfffffffffffffffe, &(0x7f0000000140)=0x40)
syslog(0x0, 0x0, 0xffffffffffffffe2)

[  595.940945] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  595.969244] *** Control State ***
01:21:15 executing program 3:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000))

[  595.986745] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca
[  595.998659] EntryControls=0000d1ff ExitControls=002fefff
[  596.004327] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
01:21:15 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x10, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x14}]}, &(0x7f0000f6bffb)='GPL\x00'}, 0x48)

01:21:15 executing program 4:
r0 = syz_open_dev$sndseq(&(0x7f0000000440)='/dev/snd/seq\x00', 0x0, 0x801)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000080)={{0x0, 0x1000001}, {0x2000000000080}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)

[  596.086341] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  596.146193] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  596.161091]         reason=80000021 qualification=0000000000000000
[  596.183228] IDTVectoring: info=00000000 errcode=00000000
[  596.207729] TSC Offset = 0xfffffebf0ca55b0f
[  596.226209] EPT pointer = 0x000000008c0de01e
01:21:16 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000001180), 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000240)={{0x0, @remote, 0x0, 0x4, 'fo\x00'}, {@dev={0xac, 0x14, 0x14, 0x1e}}}, 0x44)
fdatasync(r0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000180)={0x0, 0x1, {0x0, 0x2, 0x0, {0x1f}, {0x0, 0xfffffffffffff703}, @ramp={0x100, 0x5, {0xbb6, 0x2, 0x8}}}, {0x0, 0x8000, 0xffffffffffffe663, {0x100000001, 0x1}, {0x3b8d518d, 0x5}, @rumble={0x6, 0xdb6}}})
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
timer_create(0x7, &(0x7f0000000080)={0x0, 0x7, 0x0, @thr={0x0, &(0x7f0000000680)}}, 0x0)
timer_getoverrun(0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f00000002c0)=""/199)
flistxattr(r1, &(0x7f0000000580)=""/233, 0xe9)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920f34"])
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl(0xffffffffffffffff, 0x1000008915, 0x0)
syz_mount_image$ceph(&(0x7f0000000140)='ceph\x00', &(0x7f0000000200)='./file0\x00', 0x7, 0x1, &(0x7f0000000840)=[{&(0x7f0000000740)="3b680213e7e2784e88495a0333892a1b67c88871378266e028ea22dec70562149d08bb195381d4a0f6a3a7d0d7bbd0c5ae7705955d512cf68b3a3588f62bd2a896b8fff0453567dd4cf091f9a69deff12b7640767b9bad8a2d040a6f66dbe438681db07979616f41ab39234a72f8d3840fede4c60803cc52094b6a699aeaeb2a49ebded5c27f3451139f666adf8a7790757e332d2e8a61a5f989e97dfce55782801e154952a78413d0f845b07395a3f44c97e4988846bba3e1703746c99dba31ebce4daa3ee9769187b5fb80af2dce8d449f6ea5134695ce2d850f38", 0xdc, 0x10001}], 0x1000000, 0x0)
getuid()
openat$cgroup_int(r1, &(0x7f0000000900)='cpuset.cpus\x00', 0x2, 0x0)
poll(0x0, 0x17c, 0x4)

01:21:16 executing program 0:
mkdir(&(0x7f0000000200)='./file0\x00', 0x140)
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000380)={'filter\x00', 0x2, [{}, {}]}, 0x48)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080))
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000040)=0x3, 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2)
accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x80000)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000240)=0x2a0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, 0x0)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, &(0x7f00000009c0)=""/4096, &(0x7f00000001c0)=0x1000)
renameat2(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', r0, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff)
ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, 0x0)

01:21:16 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'nodev', 0x20, 0x39}, 0x2c, 0x0)
r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe)
keyctl$update(0x2, r0, 0x0, 0x0)

01:21:16 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070")
r1 = socket(0x848000000015, 0x805, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x801, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
lstat(0x0, &(0x7f0000000140))
listen(r4, 0x2)
setsockopt$sock_int(r3, 0x1, 0x7, 0x0, 0x0)
setsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0)
listen(r4, 0x0)
accept4(r4, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0)
connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0xe6, 0x40000)
ioctl$RTC_EPOCH_READ(r5, 0x8008700d, &(0x7f0000000300))
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0x60, "bcba7c4053f5f2426d99a26a6eb7ae0547f6dd4b60e5a48fb17aeea959950f2b5f31d258696f8501656d802a3746c6773f3692f74ebf447cc3952d427a4be0692c3830a20954e37fa93f7c264574419c3a234fdd9c6928db3fe7072552a7034d"}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'})
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000200)={0x3e4, 0x10000, 0x83e, 0x80000001, 0x0, 0x3}, 0x0)
getsockopt(r1, 0x114, 0x271b, 0x0, &(0x7f00000002c0))

01:21:16 executing program 1:
perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
syz_open_pts(r0, 0x0)
pipe(&(0x7f00000006c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

01:21:16 executing program 4:
syz_emit_ethernet(0x6a, &(0x7f0000000140)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402f, 0x0, @local, @dev, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0)

01:21:16 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070")
r1 = socket(0x848000000015, 0x805, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x801, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
lstat(0x0, &(0x7f0000000140))
listen(r4, 0x2)
setsockopt$sock_int(r3, 0x1, 0x7, 0x0, 0x0)
setsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0)
listen(r4, 0x0)
accept4(r4, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0)
connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0xe6, 0x40000)
ioctl$RTC_EPOCH_READ(r5, 0x8008700d, &(0x7f0000000300))
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0x60, "bcba7c4053f5f2426d99a26a6eb7ae0547f6dd4b60e5a48fb17aeea959950f2b5f31d258696f8501656d802a3746c6773f3692f74ebf447cc3952d427a4be0692c3830a20954e37fa93f7c264574419c3a234fdd9c6928db3fe7072552a7034d"}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'})
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000200)={0x3e4, 0x10000, 0x83e, 0x80000001, 0x0, 0x3}, 0x0)
getsockopt(r1, 0x114, 0x271b, 0x0, &(0x7f00000002c0))

01:21:16 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'nodev', 0x20, 0x39}, 0x2c, 0x0)
r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe)
keyctl$update(0x2, r0, 0x0, 0x0)

01:21:16 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070")
r1 = socket(0x848000000015, 0x805, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x801, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
lstat(0x0, &(0x7f0000000140))
listen(r4, 0x2)
setsockopt$sock_int(r3, 0x1, 0x7, 0x0, 0x0)
setsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0)
listen(r4, 0x0)
accept4(r4, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0)
connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0xe6, 0x40000)
ioctl$RTC_EPOCH_READ(r5, 0x8008700d, &(0x7f0000000300))
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0x60, "bcba7c4053f5f2426d99a26a6eb7ae0547f6dd4b60e5a48fb17aeea959950f2b5f31d258696f8501656d802a3746c6773f3692f74ebf447cc3952d427a4be0692c3830a20954e37fa93f7c264574419c3a234fdd9c6928db3fe7072552a7034d"}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'})
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000200)={0x3e4, 0x10000, 0x83e, 0x80000001, 0x0, 0x3}, 0x0)
getsockopt(r1, 0x114, 0x271b, 0x0, &(0x7f00000002c0))

01:21:16 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000001180), 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000240)={{0x0, @remote, 0x0, 0x4, 'fo\x00'}, {@dev={0xac, 0x14, 0x14, 0x1e}}}, 0x44)
fdatasync(r0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000180)={0x0, 0x1, {0x0, 0x2, 0x0, {0x1f}, {0x0, 0xfffffffffffff703}, @ramp={0x100, 0x5, {0xbb6, 0x2, 0x8}}}, {0x0, 0x8000, 0xffffffffffffe663, {0x100000001, 0x1}, {0x3b8d518d, 0x5}, @rumble={0x6, 0xdb6}}})
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
timer_create(0x7, &(0x7f0000000080)={0x0, 0x7, 0x0, @thr={0x0, &(0x7f0000000680)}}, 0x0)
timer_getoverrun(0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f00000002c0)=""/199)
flistxattr(r1, &(0x7f0000000580)=""/233, 0xe9)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920f34"])
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl(0xffffffffffffffff, 0x1000008915, 0x0)
syz_mount_image$ceph(&(0x7f0000000140)='ceph\x00', &(0x7f0000000200)='./file0\x00', 0x7, 0x1, &(0x7f0000000840)=[{&(0x7f0000000740)="3b680213e7e2784e88495a0333892a1b67c88871378266e028ea22dec70562149d08bb195381d4a0f6a3a7d0d7bbd0c5ae7705955d512cf68b3a3588f62bd2a896b8fff0453567dd4cf091f9a69deff12b7640767b9bad8a2d040a6f66dbe438681db07979616f41ab39234a72f8d3840fede4c60803cc52094b6a699aeaeb2a49ebded5c27f3451139f666adf8a7790757e332d2e8a61a5f989e97dfce55782801e154952a78413d0f845b07395a3f44c97e4988846bba3e1703746c99dba31ebce4daa3ee9769187b5fb80af2dce8d449f6ea5134695ce2d850f38", 0xdc, 0x10001}], 0x1000000, 0x0)
getuid()
openat$cgroup_int(r1, &(0x7f0000000900)='cpuset.cpus\x00', 0x2, 0x0)
poll(0x0, 0x17c, 0x4)

01:21:16 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'nodev', 0x20, 0x39}, 0x2c, 0x0)
r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe)
keyctl$update(0x2, r0, 0x0, 0x0)

01:21:16 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000001180), 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000240)={{0x0, @remote, 0x0, 0x4, 'fo\x00'}, {@dev={0xac, 0x14, 0x14, 0x1e}}}, 0x44)
fdatasync(r0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000180)={0x0, 0x1, {0x0, 0x2, 0x0, {0x1f}, {0x0, 0xfffffffffffff703}, @ramp={0x100, 0x5, {0xbb6, 0x2, 0x8}}}, {0x0, 0x8000, 0xffffffffffffe663, {0x100000001, 0x1}, {0x3b8d518d, 0x5}, @rumble={0x6, 0xdb6}}})
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
timer_create(0x7, &(0x7f0000000080)={0x0, 0x7, 0x0, @thr={0x0, &(0x7f0000000680)}}, 0x0)
timer_getoverrun(0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f00000002c0)=""/199)
flistxattr(r1, &(0x7f0000000580)=""/233, 0xe9)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920f34"])
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl(0xffffffffffffffff, 0x1000008915, 0x0)
syz_mount_image$ceph(&(0x7f0000000140)='ceph\x00', &(0x7f0000000200)='./file0\x00', 0x7, 0x1, &(0x7f0000000840)=[{&(0x7f0000000740)="3b680213e7e2784e88495a0333892a1b67c88871378266e028ea22dec70562149d08bb195381d4a0f6a3a7d0d7bbd0c5ae7705955d512cf68b3a3588f62bd2a896b8fff0453567dd4cf091f9a69deff12b7640767b9bad8a2d040a6f66dbe438681db07979616f41ab39234a72f8d3840fede4c60803cc52094b6a699aeaeb2a49ebded5c27f3451139f666adf8a7790757e332d2e8a61a5f989e97dfce55782801e154952a78413d0f845b07395a3f44c97e4988846bba3e1703746c99dba31ebce4daa3ee9769187b5fb80af2dce8d449f6ea5134695ce2d850f38", 0xdc, 0x10001}], 0x1000000, 0x0)
getuid()
openat$cgroup_int(r1, &(0x7f0000000900)='cpuset.cpus\x00', 0x2, 0x0)
poll(0x0, 0x17c, 0x4)

01:21:17 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'nodev', 0x20, 0x39}, 0x2c, 0x0)
r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe)
keyctl$update(0x2, r0, 0x0, 0x0)

01:21:17 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'nodev', 0x20, 0x39}, 0x2c, 0x0)
r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe)
keyctl$update(0x2, r0, 0x0, 0x0)

01:21:17 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000001180), 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000240)={{0x0, @remote, 0x0, 0x4, 'fo\x00'}, {@dev={0xac, 0x14, 0x14, 0x1e}}}, 0x44)
fdatasync(r0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000180)={0x0, 0x1, {0x0, 0x2, 0x0, {0x1f}, {0x0, 0xfffffffffffff703}, @ramp={0x100, 0x5, {0xbb6, 0x2, 0x8}}}, {0x0, 0x8000, 0xffffffffffffe663, {0x100000001, 0x1}, {0x3b8d518d, 0x5}, @rumble={0x6, 0xdb6}}})
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
timer_create(0x7, &(0x7f0000000080)={0x0, 0x7, 0x0, @thr={0x0, &(0x7f0000000680)}}, 0x0)
timer_getoverrun(0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f00000002c0)=""/199)
flistxattr(r1, &(0x7f0000000580)=""/233, 0xe9)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920f34"])
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl(0xffffffffffffffff, 0x1000008915, 0x0)
syz_mount_image$ceph(&(0x7f0000000140)='ceph\x00', &(0x7f0000000200)='./file0\x00', 0x7, 0x1, &(0x7f0000000840)=[{&(0x7f0000000740)="3b680213e7e2784e88495a0333892a1b67c88871378266e028ea22dec70562149d08bb195381d4a0f6a3a7d0d7bbd0c5ae7705955d512cf68b3a3588f62bd2a896b8fff0453567dd4cf091f9a69deff12b7640767b9bad8a2d040a6f66dbe438681db07979616f41ab39234a72f8d3840fede4c60803cc52094b6a699aeaeb2a49ebded5c27f3451139f666adf8a7790757e332d2e8a61a5f989e97dfce55782801e154952a78413d0f845b07395a3f44c97e4988846bba3e1703746c99dba31ebce4daa3ee9769187b5fb80af2dce8d449f6ea5134695ce2d850f38", 0xdc, 0x10001}], 0x1000000, 0x0)
getuid()
openat$cgroup_int(r1, &(0x7f0000000900)='cpuset.cpus\x00', 0x2, 0x0)
poll(0x0, 0x17c, 0x4)

01:21:17 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'nodev', 0x20, 0x39}, 0x2c, 0x0)
r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe)
keyctl$update(0x2, r0, 0x0, 0x0)

01:21:17 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'nodev', 0x20, 0x39}, 0x2c, 0x0)
r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe)
keyctl$update(0x2, r0, 0x0, 0x0)

01:21:17 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000001180), 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000240)={{0x0, @remote, 0x0, 0x4, 'fo\x00'}, {@dev={0xac, 0x14, 0x14, 0x1e}}}, 0x44)
fdatasync(r0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000180)={0x0, 0x1, {0x0, 0x2, 0x0, {0x1f}, {0x0, 0xfffffffffffff703}, @ramp={0x100, 0x5, {0xbb6, 0x2, 0x8}}}, {0x0, 0x8000, 0xffffffffffffe663, {0x100000001, 0x1}, {0x3b8d518d, 0x5}, @rumble={0x6, 0xdb6}}})
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
timer_create(0x7, &(0x7f0000000080)={0x0, 0x7, 0x0, @thr={0x0, &(0x7f0000000680)}}, 0x0)
timer_getoverrun(0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f00000002c0)=""/199)
flistxattr(r1, &(0x7f0000000580)=""/233, 0xe9)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920f34"])
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl(0xffffffffffffffff, 0x1000008915, 0x0)
syz_mount_image$ceph(&(0x7f0000000140)='ceph\x00', &(0x7f0000000200)='./file0\x00', 0x7, 0x1, &(0x7f0000000840)=[{&(0x7f0000000740)="3b680213e7e2784e88495a0333892a1b67c88871378266e028ea22dec70562149d08bb195381d4a0f6a3a7d0d7bbd0c5ae7705955d512cf68b3a3588f62bd2a896b8fff0453567dd4cf091f9a69deff12b7640767b9bad8a2d040a6f66dbe438681db07979616f41ab39234a72f8d3840fede4c60803cc52094b6a699aeaeb2a49ebded5c27f3451139f666adf8a7790757e332d2e8a61a5f989e97dfce55782801e154952a78413d0f845b07395a3f44c97e4988846bba3e1703746c99dba31ebce4daa3ee9769187b5fb80af2dce8d449f6ea5134695ce2d850f38", 0xdc, 0x10001}], 0x1000000, 0x0)
getuid()
openat$cgroup_int(r1, &(0x7f0000000900)='cpuset.cpus\x00', 0x2, 0x0)
poll(0x0, 0x17c, 0x4)

01:21:18 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070")
r1 = socket(0x848000000015, 0x805, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x801, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
lstat(0x0, &(0x7f0000000140))
listen(r4, 0x2)
setsockopt$sock_int(r3, 0x1, 0x7, 0x0, 0x0)
setsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0)
listen(r4, 0x0)
accept4(r4, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0)
connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0xe6, 0x40000)
ioctl$RTC_EPOCH_READ(r5, 0x8008700d, &(0x7f0000000300))
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0x60, "bcba7c4053f5f2426d99a26a6eb7ae0547f6dd4b60e5a48fb17aeea959950f2b5f31d258696f8501656d802a3746c6773f3692f74ebf447cc3952d427a4be0692c3830a20954e37fa93f7c264574419c3a234fdd9c6928db3fe7072552a7034d"}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'})
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000200)={0x3e4, 0x10000, 0x83e, 0x80000001, 0x0, 0x3}, 0x0)
getsockopt(r1, 0x114, 0x271b, 0x0, &(0x7f00000002c0))

01:21:18 executing program 1:
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

01:21:18 executing program 3:
r0 = timerfd_create(0x0, 0x0)
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/14, 0xe}], 0x1)
timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0x8031, 0xffffffffffffffff, 0x0)
mlockall(0x5)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

01:21:18 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000001180), 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000240)={{0x0, @remote, 0x0, 0x4, 'fo\x00'}, {@dev={0xac, 0x14, 0x14, 0x1e}}}, 0x44)
fdatasync(r0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000180)={0x0, 0x1, {0x0, 0x2, 0x0, {0x1f}, {0x0, 0xfffffffffffff703}, @ramp={0x100, 0x5, {0xbb6, 0x2, 0x8}}}, {0x0, 0x8000, 0xffffffffffffe663, {0x100000001, 0x1}, {0x3b8d518d, 0x5}, @rumble={0x6, 0xdb6}}})
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
timer_create(0x7, &(0x7f0000000080)={0x0, 0x7, 0x0, @thr={0x0, &(0x7f0000000680)}}, 0x0)
timer_getoverrun(0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f00000002c0)=""/199)
flistxattr(r1, &(0x7f0000000580)=""/233, 0xe9)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920f34"])
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl(0xffffffffffffffff, 0x1000008915, 0x0)
syz_mount_image$ceph(&(0x7f0000000140)='ceph\x00', &(0x7f0000000200)='./file0\x00', 0x7, 0x1, &(0x7f0000000840)=[{&(0x7f0000000740)="3b680213e7e2784e88495a0333892a1b67c88871378266e028ea22dec70562149d08bb195381d4a0f6a3a7d0d7bbd0c5ae7705955d512cf68b3a3588f62bd2a896b8fff0453567dd4cf091f9a69deff12b7640767b9bad8a2d040a6f66dbe438681db07979616f41ab39234a72f8d3840fede4c60803cc52094b6a699aeaeb2a49ebded5c27f3451139f666adf8a7790757e332d2e8a61a5f989e97dfce55782801e154952a78413d0f845b07395a3f44c97e4988846bba3e1703746c99dba31ebce4daa3ee9769187b5fb80af2dce8d449f6ea5134695ce2d850f38", 0xdc, 0x10001}], 0x1000000, 0x0)
getuid()
openat$cgroup_int(r1, &(0x7f0000000900)='cpuset.cpus\x00', 0x2, 0x0)
poll(0x0, 0x17c, 0x4)

01:21:18 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000001180), 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000240)={{0x0, @remote, 0x0, 0x4, 'fo\x00'}, {@dev={0xac, 0x14, 0x14, 0x1e}}}, 0x44)
fdatasync(r0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000180)={0x0, 0x1, {0x0, 0x2, 0x0, {0x1f}, {0x0, 0xfffffffffffff703}, @ramp={0x100, 0x5, {0xbb6, 0x2, 0x8}}}, {0x0, 0x8000, 0xffffffffffffe663, {0x100000001, 0x1}, {0x3b8d518d, 0x5}, @rumble={0x6, 0xdb6}}})
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
timer_create(0x7, &(0x7f0000000080)={0x0, 0x7, 0x0, @thr={0x0, &(0x7f0000000680)}}, 0x0)
timer_getoverrun(0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f00000002c0)=""/199)
flistxattr(r1, &(0x7f0000000580)=""/233, 0xe9)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920f34"])
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl(0xffffffffffffffff, 0x1000008915, 0x0)
syz_mount_image$ceph(&(0x7f0000000140)='ceph\x00', &(0x7f0000000200)='./file0\x00', 0x7, 0x1, &(0x7f0000000840)=[{&(0x7f0000000740)="3b680213e7e2784e88495a0333892a1b67c88871378266e028ea22dec70562149d08bb195381d4a0f6a3a7d0d7bbd0c5ae7705955d512cf68b3a3588f62bd2a896b8fff0453567dd4cf091f9a69deff12b7640767b9bad8a2d040a6f66dbe438681db07979616f41ab39234a72f8d3840fede4c60803cc52094b6a699aeaeb2a49ebded5c27f3451139f666adf8a7790757e332d2e8a61a5f989e97dfce55782801e154952a78413d0f845b07395a3f44c97e4988846bba3e1703746c99dba31ebce4daa3ee9769187b5fb80af2dce8d449f6ea5134695ce2d850f38", 0xdc, 0x10001}], 0x1000000, 0x0)
getuid()
openat$cgroup_int(r1, &(0x7f0000000900)='cpuset.cpus\x00', 0x2, 0x0)
poll(0x0, 0x17c, 0x4)

01:21:18 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070")
r1 = socket(0x848000000015, 0x805, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x801, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
lstat(0x0, &(0x7f0000000140))
listen(r4, 0x2)
setsockopt$sock_int(r3, 0x1, 0x7, 0x0, 0x0)
setsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0)
listen(r4, 0x0)
accept4(r4, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0)
connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0xe6, 0x40000)
ioctl$RTC_EPOCH_READ(r5, 0x8008700d, &(0x7f0000000300))
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0x60, "bcba7c4053f5f2426d99a26a6eb7ae0547f6dd4b60e5a48fb17aeea959950f2b5f31d258696f8501656d802a3746c6773f3692f74ebf447cc3952d427a4be0692c3830a20954e37fa93f7c264574419c3a234fdd9c6928db3fe7072552a7034d"}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'})
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000200)={0x3e4, 0x10000, 0x83e, 0x80000001, 0x0, 0x3}, 0x0)
getsockopt(r1, 0x114, 0x271b, 0x0, &(0x7f00000002c0))

01:21:18 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246)
close(r1)

01:21:18 executing program 5:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl(r0, 0xfdffffffffffffb6, &(0x7f0000000100))

01:21:18 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070")
r1 = socket(0x848000000015, 0x805, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x801, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
lstat(0x0, &(0x7f0000000140))
listen(r4, 0x2)
setsockopt$sock_int(r3, 0x1, 0x7, 0x0, 0x0)
setsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0)
listen(r4, 0x0)
accept4(r4, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0)
connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0xe6, 0x40000)
ioctl$RTC_EPOCH_READ(r5, 0x8008700d, &(0x7f0000000300))
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0x60, "bcba7c4053f5f2426d99a26a6eb7ae0547f6dd4b60e5a48fb17aeea959950f2b5f31d258696f8501656d802a3746c6773f3692f74ebf447cc3952d427a4be0692c3830a20954e37fa93f7c264574419c3a234fdd9c6928db3fe7072552a7034d"}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'})
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000200)={0x3e4, 0x10000, 0x83e, 0x80000001, 0x0, 0x3}, 0x0)
getsockopt(r1, 0x114, 0x271b, 0x0, &(0x7f00000002c0))

01:21:18 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246)
close(r1)

01:21:19 executing program 4:
r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x400001000009, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000001c0)={0x3, 0x100000000098f904, 0x1})

01:21:19 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000280)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90)

01:21:19 executing program 0:
r0 = socket$kcm(0x2, 0x3, 0x2)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_bridge\x00', &(0x7f0000000000)=@ethtool_eee={0x4e}})

01:21:19 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246)
close(r1)

01:21:19 executing program 3:
r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x100, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="a8c65ca729c9e4cae92c2d14e798ffe980d2dcff7f17b3abc92679fc8d89e329980b1ae9218ac3b3069dee6194bccfb34d56879d7a9e7b24471de9b181f82d5d36498be8ae960aadd650391c6af07f1cbcdc726ff9d7aaf9a897a8ee83edf59095b1bfee42887aa155bd079f3616a1005b21de3e5f36042ebff8c8987ec60723a19d7f1f0d8e4429a9ad227039889d9e7c9ce66d2b87bbae5714032c5b8bc9cc3eb18c542a14f117868595c05256d585761da4dfab2f92a9481aa1d79a1084328e2677f381a17f29"})

01:21:19 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x80003, 0x3)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x10)
setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040)=0x40, 0x4)
recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0)

01:21:19 executing program 4:
r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x400001000009, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000001c0)={0x3, 0x100000000098f904, 0x1})

01:21:19 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)

01:21:19 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246)
close(r1)

01:21:19 executing program 5:
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000480)={0x1, 0x5})

[  599.828529] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
01:21:19 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x15, 0x5, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x100}, 0x10)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x200000000012, 0x0, @thr={&(0x7f0000001100), &(0x7f0000000240)}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000001080)={{}, {0x0, 0x1c9c380}}, &(0x7f00000010c0))
tkill(r1, 0x1000000000016)

01:21:19 executing program 4:
r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x400001000009, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000001c0)={0x3, 0x100000000098f904, 0x1})

[  599.939520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
01:21:19 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x80)
openat(0xffffffffffffffff, 0x0, 0x40000, 0x0)
r1 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x1c, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc80000000025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd0160ec941a3de45387daf7b1ac786d0e8a75e8904655faf6f2bc6cc487d93a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18ffffffffffff4116893616105829576914e70bfeb59800f97c97644ab8a7"})

01:21:19 executing program 4:
r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x400001000009, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000001c0)={0x3, 0x100000000098f904, 0x1})

[  600.191385] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  600.197940] Buffer I/O error on dev loop0, logical block 0, async page read
[  600.207575] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  600.214121] Buffer I/O error on dev loop0, logical block 0, async page read
01:21:20 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x80003, 0x3)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x10)
setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040)=0x40, 0x4)
recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0)

[  600.247893] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  600.254436] Buffer I/O error on dev loop0, logical block 0, async page read
[  600.280721] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  600.287250] Buffer I/O error on dev loop0, logical block 0, async page read
01:21:20 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x15, 0x5, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x100}, 0x10)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x200000000012, 0x0, @thr={&(0x7f0000001100), &(0x7f0000000240)}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000001080)={{}, {0x0, 0x1c9c380}}, &(0x7f00000010c0))
tkill(r1, 0x1000000000016)

01:21:20 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x15, 0x5, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x100}, 0x10)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x200000000012, 0x0, @thr={&(0x7f0000001100), &(0x7f0000000240)}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000001080)={{}, {0x0, 0x1c9c380}}, &(0x7f00000010c0))
tkill(r1, 0x1000000000016)

[  600.313229] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  600.319784] Buffer I/O error on dev loop0, logical block 0, async page read
[  600.345710] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  600.352260] Buffer I/O error on dev loop0, logical block 0, async page read
[  600.398541] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  600.405028] Buffer I/O error on dev loop0, logical block 0, async page read
[  600.452130] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  600.458683] Buffer I/O error on dev loop0, logical block 0, async page read
[  600.466053] ldm_validate_partition_table(): Disk read failed.
[  600.494797] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  600.501315] Buffer I/O error on dev loop0, logical block 0, async page read
[  600.527293] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  600.533814] Buffer I/O error on dev loop0, logical block 0, async page read
01:21:20 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x15, 0x5, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x100}, 0x10)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x200000000012, 0x0, @thr={&(0x7f0000001100), &(0x7f0000000240)}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000001080)={{}, {0x0, 0x1c9c380}}, &(0x7f00000010c0))
tkill(r1, 0x1000000000016)

01:21:20 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x15, 0x5, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x100}, 0x10)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x200000000012, 0x0, @thr={&(0x7f0000001100), &(0x7f0000000240)}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000001080)={{}, {0x0, 0x1c9c380}}, &(0x7f00000010c0))
tkill(r1, 0x1000000000016)

[  600.565581] Dev loop0: unable to read RDB block 0
[  600.581245]  loop0: unable to read partition table
[  600.609980] loop_reread_partitions: partition scan of loop0 (p
àõ|Œö'$äé`Bªå‡TÁÕœÈ) failed (rc=-5)
01:21:20 executing program 2:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='memory.stat\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
fadvise64(r1, 0x0, 0x0, 0x4)
ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f00000006c0)={0x0, 0x2b, 0x1, <r3=>0xffffffffffffff9c})
fcntl$getownex(r3, 0x10, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000000000000000000000000000000000000000000000000000000000000"])
r4 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x1)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, 0x0}, 0x0)
r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0)
r6 = fcntl$getown(r5, 0x9)
mkdirat$cgroup(r4, 0x0, 0x1ff)
fsetxattr$security_selinux(r5, &(0x7f0000000540)='security.selinux\x00', 0x0, 0x0, 0x2)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000640)={'veth0_to_team\x00', 0x6})
recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/9, 0x9}, {&(0x7f0000000580)=""/156, 0x9c}, {&(0x7f00000001c0)=""/6, 0x6}], 0x3, &(0x7f0000000800)=""/66, 0x42}, 0x20)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgroups(0x0, 0x0)
getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2)
write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0)
ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000280)=0x1f)
sched_setscheduler(r6, 0x0, &(0x7f0000000680)=0x9)
ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000080)={'lo\x00\n\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00&\x00', {0x2, 0x0, @rand_addr=0xfffffffffffffffe}})

[  600.826850] __loop_clr_fd: partition scan of loop0 failed (rc=-22)
01:21:20 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x15, 0x5, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x100}, 0x10)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x200000000012, 0x0, @thr={&(0x7f0000001100), &(0x7f0000000240)}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000001080)={{}, {0x0, 0x1c9c380}}, &(0x7f00000010c0))
tkill(r1, 0x1000000000016)

01:21:20 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x15, 0x5, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x100}, 0x10)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x200000000012, 0x0, @thr={&(0x7f0000001100), &(0x7f0000000240)}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000001080)={{}, {0x0, 0x1c9c380}}, &(0x7f00000010c0))
tkill(r1, 0x1000000000016)

01:21:20 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x80)
openat(0xffffffffffffffff, 0x0, 0x40000, 0x0)
r1 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x1c, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc80000000025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd0160ec941a3de45387daf7b1ac786d0e8a75e8904655faf6f2bc6cc487d93a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18ffffffffffff4116893616105829576914e70bfeb59800f97c97644ab8a7"})

01:21:20 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03, 0x1]})
ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc008ae91, &(0x7f0000000100))

01:21:20 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x80003, 0x3)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x10)
setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040)=0x40, 0x4)
recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0)

[  601.143471] ldm_validate_partition_table(): Disk read failed.
[  601.160500] Dev loop0: unable to read RDB block 0
[  601.186928]  loop0: unable to read partition table
01:21:21 executing program 4:
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000180))
dup2(0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync()
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x101002, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246)
ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000001c0)=0x600210)
syz_open_dev$amidi(0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = memfd_create(&(0x7f00000000c0)='^\x00', 0x0)
readv(r0, 0x0, 0x0)
pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
sendfile(r0, r1, &(0x7f00000ddff8), 0x102002700)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000004c0), &(0x7f0000000500)=0x30)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, &(0x7f00000005c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)

[  601.210128] loop_reread_partitions: partition scan of loop0 (p
àõ|Œö'$äé`Bªå‡TÁÕœÈ) failed (rc=-5)
01:21:21 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x5}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00'}, 0x48)

01:21:21 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x80)
openat(0xffffffffffffffff, 0x0, 0x40000, 0x0)
r1 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x1c, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc80000000025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd0160ec941a3de45387daf7b1ac786d0e8a75e8904655faf6f2bc6cc487d93a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18ffffffffffff4116893616105829576914e70bfeb59800f97c97644ab8a7"})

[  601.486783] __loop_clr_fd: partition scan of loop0 failed (rc=-22)
01:21:21 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x80003, 0x3)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x10)
setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040)=0x40, 0x4)
recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0)

[  601.682169] ldm_validate_partition_table(): Disk read failed.
[  601.702854] Dev loop0: unable to read RDB block 0
[  601.717915]  loop0: unable to read partition table
[  601.740256] loop_reread_partitions: partition scan of loop0 (p
àõ|Œö'$äé`Bªå‡TÁÕœÈ) failed (rc=-5)
[  601.847225] __loop_clr_fd: partition scan of loop0 failed (rc=-22)
01:21:21 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x80)
openat(0xffffffffffffffff, 0x0, 0x40000, 0x0)
r1 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x1c, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc80000000025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd0160ec941a3de45387daf7b1ac786d0e8a75e8904655faf6f2bc6cc487d93a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18ffffffffffff4116893616105829576914e70bfeb59800f97c97644ab8a7"})

01:21:22 executing program 0:
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a000000b7f7a444d33edeaa26b4bfa35d120d43e8f61b0d7c8e"], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffffd7, 0x0, 0x0, 0xfffffffffffffea6)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0x51, 0x4)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  602.121561] ldm_validate_partition_table(): Disk read failed.
[  602.147979] Dev loop0: unable to read RDB block 0
[  602.163474]  loop0: unable to read partition table
[  602.198818] loop_reread_partitions: partition scan of loop0 (p
àõ|Œö'$äé`Bªå‡TÁÕœÈ) failed (rc=-5)
01:21:22 executing program 2:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='memory.stat\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
fadvise64(r1, 0x0, 0x0, 0x4)
ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f00000006c0)={0x0, 0x2b, 0x1, <r3=>0xffffffffffffff9c})
fcntl$getownex(r3, 0x10, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000000000000000000000000000000000000000000000000000000000000"])
r4 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x1)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, 0x0}, 0x0)
r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0)
r6 = fcntl$getown(r5, 0x9)
mkdirat$cgroup(r4, 0x0, 0x1ff)
fsetxattr$security_selinux(r5, &(0x7f0000000540)='security.selinux\x00', 0x0, 0x0, 0x2)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000640)={'veth0_to_team\x00', 0x6})
recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/9, 0x9}, {&(0x7f0000000580)=""/156, 0x9c}, {&(0x7f00000001c0)=""/6, 0x6}], 0x3, &(0x7f0000000800)=""/66, 0x42}, 0x20)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgroups(0x0, 0x0)
getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2)
write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0)
ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000280)=0x1f)
sched_setscheduler(r6, 0x0, &(0x7f0000000680)=0x9)
ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000080)={'lo\x00\n\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00&\x00', {0x2, 0x0, @rand_addr=0xfffffffffffffffe}})

01:21:22 executing program 3:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='memory.stat\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
fadvise64(r1, 0x0, 0x0, 0x4)
ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f00000006c0)={0x0, 0x2b, 0x1, <r3=>0xffffffffffffff9c})
fcntl$getownex(r3, 0x10, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000000000000000000000000000000000000000000000000000000000000"])
r4 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x1)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, 0x0}, 0x0)
r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0)
r6 = fcntl$getown(r5, 0x9)
mkdirat$cgroup(r4, 0x0, 0x1ff)
fsetxattr$security_selinux(r5, &(0x7f0000000540)='security.selinux\x00', 0x0, 0x0, 0x2)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000640)={'veth0_to_team\x00', 0x6})
recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/9, 0x9}, {&(0x7f0000000580)=""/156, 0x9c}, {&(0x7f00000001c0)=""/6, 0x6}], 0x3, &(0x7f0000000800)=""/66, 0x42}, 0x20)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgroups(0x0, 0x0)
getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2)
write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0)
ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000280)=0x1f)
sched_setscheduler(r6, 0x0, &(0x7f0000000680)=0x9)
ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000080)={'lo\x00\n\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00&\x00', {0x2, 0x0, @rand_addr=0xfffffffffffffffe}})

01:21:22 executing program 1:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='memory.stat\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
fadvise64(r1, 0x0, 0x0, 0x4)
ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f00000006c0)={0x0, 0x2b, 0x1, <r3=>0xffffffffffffff9c})
fcntl$getownex(r3, 0x10, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000000000000000000000000000000000000000000000000000000000000"])
r4 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x1)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, 0x0}, 0x0)
r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0)
r6 = fcntl$getown(r5, 0x9)
mkdirat$cgroup(r4, 0x0, 0x1ff)
fsetxattr$security_selinux(r5, &(0x7f0000000540)='security.selinux\x00', 0x0, 0x0, 0x2)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000640)={'veth0_to_team\x00', 0x6})
recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/9, 0x9}, {&(0x7f0000000580)=""/156, 0x9c}, {&(0x7f00000001c0)=""/6, 0x6}], 0x3, &(0x7f0000000800)=""/66, 0x42}, 0x20)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgroups(0x0, 0x0)
getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2)
write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0)
ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000280)=0x1f)
sched_setscheduler(r6, 0x0, &(0x7f0000000680)=0x9)
ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000080)={'lo\x00\n\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00&\x00', {0x2, 0x0, @rand_addr=0xfffffffffffffffe}})

01:21:22 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48)

[  602.387117] __loop_clr_fd: partition scan of loop0 failed (rc=-22)
01:21:22 executing program 4:
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000180))
dup2(0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync()
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x101002, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246)
ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000001c0)=0x600210)
syz_open_dev$amidi(0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = memfd_create(&(0x7f00000000c0)='^\x00', 0x0)
readv(r0, 0x0, 0x0)
pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
sendfile(r0, r1, &(0x7f00000ddff8), 0x102002700)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000004c0), &(0x7f0000000500)=0x30)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, &(0x7f00000005c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)

01:21:22 executing program 5:
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000200), 0x4)

01:21:22 executing program 5:
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000200), 0x4)

01:21:22 executing program 5:
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000200), 0x4)

01:21:22 executing program 5:
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000200), 0x4)

01:21:22 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0xfffffffffffff68f, 0xc0a})

01:21:23 executing program 2:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='memory.stat\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
fadvise64(r1, 0x0, 0x0, 0x4)
ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f00000006c0)={0x0, 0x2b, 0x1, <r3=>0xffffffffffffff9c})
fcntl$getownex(r3, 0x10, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000000000000000000000000000000000000000000000000000000000000"])
r4 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x1)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, 0x0}, 0x0)
r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0)
r6 = fcntl$getown(r5, 0x9)
mkdirat$cgroup(r4, 0x0, 0x1ff)
fsetxattr$security_selinux(r5, &(0x7f0000000540)='security.selinux\x00', 0x0, 0x0, 0x2)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000640)={'veth0_to_team\x00', 0x6})
recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/9, 0x9}, {&(0x7f0000000580)=""/156, 0x9c}, {&(0x7f00000001c0)=""/6, 0x6}], 0x3, &(0x7f0000000800)=""/66, 0x42}, 0x20)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgroups(0x0, 0x0)
getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2)
write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0)
ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000280)=0x1f)
sched_setscheduler(r6, 0x0, &(0x7f0000000680)=0x9)
ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000080)={'lo\x00\n\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00&\x00', {0x2, 0x0, @rand_addr=0xfffffffffffffffe}})

01:21:23 executing program 0:
r0 = socket$inet6(0xa, 0x80002, 0x100000000000088)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
recvmmsg(r0, &(0x7f0000006ac0)=[{{&(0x7f00000001c0)=@can, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x100000000802, 0x88)
setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f0000000480)=0x9, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x8800, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070")
sendto$inet6(r1, &(0x7f0000000d40)="ddd9", 0x2, 0x0, 0x0, 0x0)

01:21:23 executing program 3:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='memory.stat\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
fadvise64(r1, 0x0, 0x0, 0x4)
ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f00000006c0)={0x0, 0x2b, 0x1, <r3=>0xffffffffffffff9c})
fcntl$getownex(r3, 0x10, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000000000000000000000000000000000000000000000000000000000000"])
r4 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x1)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, 0x0}, 0x0)
r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0)
r6 = fcntl$getown(r5, 0x9)
mkdirat$cgroup(r4, 0x0, 0x1ff)
fsetxattr$security_selinux(r5, &(0x7f0000000540)='security.selinux\x00', 0x0, 0x0, 0x2)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000640)={'veth0_to_team\x00', 0x6})
recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/9, 0x9}, {&(0x7f0000000580)=""/156, 0x9c}, {&(0x7f00000001c0)=""/6, 0x6}], 0x3, &(0x7f0000000800)=""/66, 0x42}, 0x20)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgroups(0x0, 0x0)
getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2)
write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0)
ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000280)=0x1f)
sched_setscheduler(r6, 0x0, &(0x7f0000000680)=0x9)
ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000080)={'lo\x00\n\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00&\x00', {0x2, 0x0, @rand_addr=0xfffffffffffffffe}})

01:21:23 executing program 1:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='memory.stat\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
fadvise64(r1, 0x0, 0x0, 0x4)
ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f00000006c0)={0x0, 0x2b, 0x1, <r3=>0xffffffffffffff9c})
fcntl$getownex(r3, 0x10, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000000000000000000000000000000000000000000000000000000000000"])
r4 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x1)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, 0x0}, 0x0)
r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0)
r6 = fcntl$getown(r5, 0x9)
mkdirat$cgroup(r4, 0x0, 0x1ff)
fsetxattr$security_selinux(r5, &(0x7f0000000540)='security.selinux\x00', 0x0, 0x0, 0x2)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000640)={'veth0_to_team\x00', 0x6})
recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/9, 0x9}, {&(0x7f0000000580)=""/156, 0x9c}, {&(0x7f00000001c0)=""/6, 0x6}], 0x3, &(0x7f0000000800)=""/66, 0x42}, 0x20)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgroups(0x0, 0x0)
getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2)
write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0)
ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000280)=0x1f)
sched_setscheduler(r6, 0x0, &(0x7f0000000680)=0x9)
ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000080)={'lo\x00\n\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00&\x00', {0x2, 0x0, @rand_addr=0xfffffffffffffffe}})

01:21:23 executing program 2:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='memory.stat\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
fadvise64(r1, 0x0, 0x0, 0x4)
ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f00000006c0)={0x0, 0x2b, 0x1, <r3=>0xffffffffffffff9c})
fcntl$getownex(r3, 0x10, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000000000000000000000000000000000000000000000000000000000000"])
r4 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x1)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, 0x0}, 0x0)
r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0)
r6 = fcntl$getown(r5, 0x9)
mkdirat$cgroup(r4, 0x0, 0x1ff)
fsetxattr$security_selinux(r5, &(0x7f0000000540)='security.selinux\x00', 0x0, 0x0, 0x2)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000640)={'veth0_to_team\x00', 0x6})
recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/9, 0x9}, {&(0x7f0000000580)=""/156, 0x9c}, {&(0x7f00000001c0)=""/6, 0x6}], 0x3, &(0x7f0000000800)=""/66, 0x42}, 0x20)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgroups(0x0, 0x0)
getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2)
write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0)
ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000280)=0x1f)
sched_setscheduler(r6, 0x0, &(0x7f0000000680)=0x9)
ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000080)={'lo\x00\n\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00&\x00', {0x2, 0x0, @rand_addr=0xfffffffffffffffe}})

01:21:23 executing program 4:
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000180))
dup2(0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync()
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x101002, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246)
ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000001c0)=0x600210)
syz_open_dev$amidi(0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = memfd_create(&(0x7f00000000c0)='^\x00', 0x0)
readv(r0, 0x0, 0x0)
pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
sendfile(r0, r1, &(0x7f00000ddff8), 0x102002700)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000004c0), &(0x7f0000000500)=0x30)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, &(0x7f00000005c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)

01:21:23 executing program 0:
r0 = socket$inet6(0xa, 0x80002, 0x100000000000088)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
recvmmsg(r0, &(0x7f0000006ac0)=[{{&(0x7f00000001c0)=@can, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x100000000802, 0x88)
setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f0000000480)=0x9, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x8800, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070")
sendto$inet6(r1, &(0x7f0000000d40)="ddd9", 0x2, 0x0, 0x0, 0x0)

01:21:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x3ff}}, 0x18)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000100)={{0x0, 0x4}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0xaaaaaaaaaaaac30, 0x0, 0x0, 0x3ae)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x6})
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:21:23 executing program 0:
r0 = socket$inet6(0xa, 0x80002, 0x100000000000088)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
recvmmsg(r0, &(0x7f0000006ac0)=[{{&(0x7f00000001c0)=@can, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x100000000802, 0x88)
setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f0000000480)=0x9, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x8800, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070")
sendto$inet6(r1, &(0x7f0000000d40)="ddd9", 0x2, 0x0, 0x0, 0x0)

01:21:23 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00')
preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003)

01:21:23 executing program 4:
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000180))
dup2(0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync()
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x101002, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246)
ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000001c0)=0x600210)
syz_open_dev$amidi(0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = memfd_create(&(0x7f00000000c0)='^\x00', 0x0)
readv(r0, 0x0, 0x0)
pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
sendfile(r0, r1, &(0x7f00000ddff8), 0x102002700)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000004c0), &(0x7f0000000500)=0x30)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, &(0x7f00000005c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)

01:21:23 executing program 0:
r0 = socket$inet6(0xa, 0x80002, 0x100000000000088)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
recvmmsg(r0, &(0x7f0000006ac0)=[{{&(0x7f00000001c0)=@can, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x100000000802, 0x88)
setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f0000000480)=0x9, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x8800, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070")
sendto$inet6(r1, &(0x7f0000000d40)="ddd9", 0x2, 0x0, 0x0, 0x0)

01:21:24 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00')
preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003)

01:21:24 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x1000000001})
preadv(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/73, 0x3}], 0x1, 0x0)
r1 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')

01:21:24 executing program 3:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='memory.stat\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
fadvise64(r1, 0x0, 0x0, 0x4)
ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f00000006c0)={0x0, 0x2b, 0x1, <r3=>0xffffffffffffff9c})
fcntl$getownex(r3, 0x10, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000000000000000000000000000000000000000000000000000000000000"])
r4 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x1)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, 0x0}, 0x0)
r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0)
r6 = fcntl$getown(r5, 0x9)
mkdirat$cgroup(r4, 0x0, 0x1ff)
fsetxattr$security_selinux(r5, &(0x7f0000000540)='security.selinux\x00', 0x0, 0x0, 0x2)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000640)={'veth0_to_team\x00', 0x6})
recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/9, 0x9}, {&(0x7f0000000580)=""/156, 0x9c}, {&(0x7f00000001c0)=""/6, 0x6}], 0x3, &(0x7f0000000800)=""/66, 0x42}, 0x20)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgroups(0x0, 0x0)
getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2)
write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0)
ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000280)=0x1f)
sched_setscheduler(r6, 0x0, &(0x7f0000000680)=0x9)
ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000080)={'lo\x00\n\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00&\x00', {0x2, 0x0, @rand_addr=0xfffffffffffffffe}})

[  604.435029] device nr0
 entered promiscuous mode
01:21:24 executing program 1:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='memory.stat\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
fadvise64(r1, 0x0, 0x0, 0x4)
ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f00000006c0)={0x0, 0x2b, 0x1, <r3=>0xffffffffffffff9c})
fcntl$getownex(r3, 0x10, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000000000000000000000000000000000000000000000000000000000000"])
r4 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x1)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, 0x0}, 0x0)
r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0)
r6 = fcntl$getown(r5, 0x9)
mkdirat$cgroup(r4, 0x0, 0x1ff)
fsetxattr$security_selinux(r5, &(0x7f0000000540)='security.selinux\x00', 0x0, 0x0, 0x2)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000640)={'veth0_to_team\x00', 0x6})
recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/9, 0x9}, {&(0x7f0000000580)=""/156, 0x9c}, {&(0x7f00000001c0)=""/6, 0x6}], 0x3, &(0x7f0000000800)=""/66, 0x42}, 0x20)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgroups(0x0, 0x0)
getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2)
write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0)
ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000280)=0x1f)
sched_setscheduler(r6, 0x0, &(0x7f0000000680)=0x9)
ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000080)={'lo\x00\n\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00&\x00', {0x2, 0x0, @rand_addr=0xfffffffffffffffe}})

01:21:24 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00')
preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003)

01:21:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x3ff}}, 0x18)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000100)={{0x0, 0x4}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0xaaaaaaaaaaaac30, 0x0, 0x0, 0x3ae)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x6})
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:21:24 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00')
preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003)

01:21:25 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x3ff}}, 0x18)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000100)={{0x0, 0x4}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0xaaaaaaaaaaaac30, 0x0, 0x0, 0x3ae)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x6})
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:21:25 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x3ff}}, 0x18)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000100)={{0x0, 0x4}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0xaaaaaaaaaaaac30, 0x0, 0x0, 0x3ae)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x6})
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:21:25 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040))

01:21:25 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x1000000001})
preadv(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/73, 0x3}], 0x1, 0x0)
r1 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')

01:21:25 executing program 4:
preadv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/252, 0xfffffcd6}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='stack\x00')
preadv(r0, &(0x7f0000000480), 0x1000000000000046, 0x0)

01:21:25 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2})
ioctl$TUNSETOFFLOAD(r1, 0x400454dc, 0xa06ffd)

[  605.650331] device nr0
 entered promiscuous mode
01:21:25 executing program 4:
preadv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/252, 0xfffffcd6}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='stack\x00')
preadv(r0, &(0x7f0000000480), 0x1000000000000046, 0x0)

01:21:25 executing program 4:
preadv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/252, 0xfffffcd6}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='stack\x00')
preadv(r0, &(0x7f0000000480), 0x1000000000000046, 0x0)

01:21:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x3ff}}, 0x18)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000100)={{0x0, 0x4}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0xaaaaaaaaaaaac30, 0x0, 0x0, 0x3ae)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x6})
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:21:26 executing program 4:
preadv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/252, 0xfffffcd6}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='stack\x00')
preadv(r0, &(0x7f0000000480), 0x1000000000000046, 0x0)

01:21:26 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={0x0, 0x3e}, &(0x7f0000000280)=0x8)

01:21:26 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x3ff}}, 0x18)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000100)={{0x0, 0x4}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0xaaaaaaaaaaaac30, 0x0, 0x0, 0x3ae)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x6})
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:21:26 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x3ff}}, 0x18)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000100)={{0x0, 0x4}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0xaaaaaaaaaaaac30, 0x0, 0x0, 0x3ae)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x6})
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  606.531370] sctp: [Deprecated]: syz-executor4 (pid 24710) Use of struct sctp_assoc_value in delayed_ack socket option.
[  606.531370] Use struct sctp_sack_info instead
01:21:26 executing program 4:
pipe2$9p(&(0x7f0000000300)={<r0=>0xffffffffffffffff}, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1})

01:21:26 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2})
ioctl$TUNSETOFFLOAD(r1, 0x400454dc, 0xa06ffd)

01:21:26 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x1000000001})
preadv(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/73, 0x3}], 0x1, 0x0)
r1 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')

01:21:26 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
lsetxattr$trusted_overlay_nlink(0x0, &(0x7f0000000180)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
r0 = syz_open_dev$adsp(&(0x7f0000000480)='/dev/adsp#\x00', 0xeb, 0x42200)
ioctl$NBD_DO_IT(r0, 0xab03)
syz_mount_image$ext4(0x0, &(0x7f0000000680)='./file0\x00', 0x0, 0x0, 0x0, 0x200000, 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
symlink(&(0x7f0000000500)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00')
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
mount$9p_tcp(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f00000003c0)={0x100000000})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), 0x4)
renameat(r1, &(0x7f0000000040)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x0, 0xc04e27d3b503e3df, 0x0, <r2=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040))

01:21:26 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x3ff}}, 0x18)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000100)={{0x0, 0x4}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0xaaaaaaaaaaaac30, 0x0, 0x0, 0x3ae)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x6})
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  606.920287] device nr0
 entered promiscuous mode
01:21:26 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2})
ioctl$TUNSETOFFLOAD(r1, 0x400454dc, 0xa06ffd)

01:21:26 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x3ff}}, 0x18)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000100)={{0x0, 0x4}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0xaaaaaaaaaaaac30, 0x0, 0x0, 0x3ae)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x6})
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:21:26 executing program 4:
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f00000004c0))
r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000280), 0x4)
syz_genetlink_get_family_id$fou(&(0x7f0000000540)='fou\x00')
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40041)
dup3(r0, 0xffffffffffffffff, 0x1004)
r1 = add_key(&(0x7f0000000340)='trusted\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000000840)="53c81016d019133b847beb288e0fee533f57ab957d485a1786c245f3f0c68a5ca5134e62d67f928e4734b7c8e1b11a2740c1d67205dec26e4f91d20da4edc4037eca3f393b5028c3d03bb3ca7aa6a05dda4c1e961e07de74a9a4b5bf9b7a56307b37d88aeba50b83c0c09f851264b66d7ff2f7df47e8c6b504b6853aaa38fdc567e11276140d0a9f952551bb29a1f6a5c5e3806bd08f6bf394e2b94d58bba4a7ed7e8814e383e11dfc916573dda22fc1a6774dd6ab7bebbf7801f1eb025b56e371a1e9ec789ee30b", 0xc8, 0xffffffffffffffff)
keyctl$assume_authority(0x10, r1)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
write$smack_current(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x81)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000}, {{@in6, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x0, 0x0, 0x0, 0x10006}}, 0xe8)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x200000000000000, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000007e00), 0x400000000000058, 0x0)

01:21:27 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x3ff}}, 0x18)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000100)={{0x0, 0x4}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0xaaaaaaaaaaaac30, 0x0, 0x0, 0x3ae)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x6})
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:21:28 executing program 4:
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f00000004c0))
r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000280), 0x4)
syz_genetlink_get_family_id$fou(&(0x7f0000000540)='fou\x00')
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40041)
dup3(r0, 0xffffffffffffffff, 0x1004)
r1 = add_key(&(0x7f0000000340)='trusted\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000000840)="53c81016d019133b847beb288e0fee533f57ab957d485a1786c245f3f0c68a5ca5134e62d67f928e4734b7c8e1b11a2740c1d67205dec26e4f91d20da4edc4037eca3f393b5028c3d03bb3ca7aa6a05dda4c1e961e07de74a9a4b5bf9b7a56307b37d88aeba50b83c0c09f851264b66d7ff2f7df47e8c6b504b6853aaa38fdc567e11276140d0a9f952551bb29a1f6a5c5e3806bd08f6bf394e2b94d58bba4a7ed7e8814e383e11dfc916573dda22fc1a6774dd6ab7bebbf7801f1eb025b56e371a1e9ec789ee30b", 0xc8, 0xffffffffffffffff)
keyctl$assume_authority(0x10, r1)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
write$smack_current(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x81)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000}, {{@in6, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x0, 0x0, 0x0, 0x10006}}, 0xe8)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x200000000000000, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000007e00), 0x400000000000058, 0x0)

01:21:28 executing program 5:
clone(0x3102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@acquire={0x40406300}], 0x0, 0x0, 0x0})

01:21:28 executing program 2:
r0 = socket$inet6(0xa, 0x80002, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'team0\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "901035b190f9273192b042906d93e0588f365d1735f8521849e36be7c0f824bc", "0441e522771a7136f4d3beeed005e2b3950da0d8bf2900c39ed245467d67e103", "594297ffd4493ed436e1a889f3d6a5400c8e2b4692125a87065606f824ffc4a9", "bfe189ba00e4f27c55a1a45f85e9a82e40d4e87ee97b1b995df6cab712254c03", "c3cf54acc7c629d2d17541345febb8af4c93afb6e7cd8fe6b2c3e501efa17927", "a5f1518fd739a5cc81345262"}})

01:21:28 executing program 5:
clone(0x3102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@acquire={0x40406300}], 0x0, 0x0, 0x0})

[  608.398630] binder: 24824:24825 ioctl c0306201 20a20000 returned -14
01:21:28 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
r1 = dup(r0)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4)
removexattr(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=@known='trusted.overlay.impure\x00')
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$unix(0x1, 0x100000002005, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
mkdirat$cgroup(r3, &(0x7f0000000080)='3yz0\x00', 0x1ff)
fchdir(r3)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000280)='./file0\x00', 0x0)
write$FUSE_LSEEK(r2, 0x0, 0x0)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000200))
r4 = syz_open_dev$vcsn(0x0, 0x800, 0x80040)
io_setup(0x6, &(0x7f00000000c0))
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={r4, 0x2, 0x1, 0x2, &(0x7f00000001c0)=[0x0], 0x1}, 0x20)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000600)=0xe8)
fsetxattr$security_capability(r3, &(0x7f0000000240)='security.capability\x00', &(0x7f0000000640)=@v3={0x3000000, [{}, {0x401, 0x7}], r5}, 0x18, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getpeername(r1, &(0x7f0000000340)=@rc, &(0x7f0000000140)=0x80)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x400, 0x0)
setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000005c0), 0xfffffffffffffe26)
write$apparmor_exec(r1, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x1)
socket$alg(0x26, 0x5, 0x0)

01:21:28 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x1000000001})
preadv(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/73, 0x3}], 0x1, 0x0)
r1 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')

01:21:28 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2})
ioctl$TUNSETOFFLOAD(r1, 0x400454dc, 0xa06ffd)

[  608.568583] binder: 24838:24841 ioctl c0306201 20a20000 returned -14
01:21:28 executing program 5:
clone(0x3102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@acquire={0x40406300}], 0x0, 0x0, 0x0})

[  608.732163] device nr0
 entered promiscuous mode
01:21:28 executing program 1:
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200))
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)
ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006)
timer_settime(0x0, 0x0, 0x0, &(0x7f0000000380))
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0xfffffffffffffda7)
bind$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10)

01:21:28 executing program 5:
clone(0x3102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@acquire={0x40406300}], 0x0, 0x0, 0x0})

[  608.830984] binder: 24861:24863 ioctl c0306201 20a20000 returned -14
[  608.987415] binder: 24874:24876 ioctl c0306201 20a20000 returned -14
01:21:28 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
prctl$PR_SET_KEEPCAPS(0x8, 0x0)

01:21:28 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
r1 = dup(r0)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4)
removexattr(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=@known='trusted.overlay.impure\x00')
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$unix(0x1, 0x100000002005, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
mkdirat$cgroup(r3, &(0x7f0000000080)='3yz0\x00', 0x1ff)
fchdir(r3)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000280)='./file0\x00', 0x0)
write$FUSE_LSEEK(r2, 0x0, 0x0)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000200))
r4 = syz_open_dev$vcsn(0x0, 0x800, 0x80040)
io_setup(0x6, &(0x7f00000000c0))
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={r4, 0x2, 0x1, 0x2, &(0x7f00000001c0)=[0x0], 0x1}, 0x20)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000600)=0xe8)
fsetxattr$security_capability(r3, &(0x7f0000000240)='security.capability\x00', &(0x7f0000000640)=@v3={0x3000000, [{}, {0x401, 0x7}], r5}, 0x18, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getpeername(r1, &(0x7f0000000340)=@rc, &(0x7f0000000140)=0x80)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x400, 0x0)
setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000005c0), 0xfffffffffffffe26)
write$apparmor_exec(r1, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x1)
socket$alg(0x26, 0x5, 0x0)

01:21:29 executing program 4:
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f00000004c0))
r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000280), 0x4)
syz_genetlink_get_family_id$fou(&(0x7f0000000540)='fou\x00')
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40041)
dup3(r0, 0xffffffffffffffff, 0x1004)
r1 = add_key(&(0x7f0000000340)='trusted\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000000840)="53c81016d019133b847beb288e0fee533f57ab957d485a1786c245f3f0c68a5ca5134e62d67f928e4734b7c8e1b11a2740c1d67205dec26e4f91d20da4edc4037eca3f393b5028c3d03bb3ca7aa6a05dda4c1e961e07de74a9a4b5bf9b7a56307b37d88aeba50b83c0c09f851264b66d7ff2f7df47e8c6b504b6853aaa38fdc567e11276140d0a9f952551bb29a1f6a5c5e3806bd08f6bf394e2b94d58bba4a7ed7e8814e383e11dfc916573dda22fc1a6774dd6ab7bebbf7801f1eb025b56e371a1e9ec789ee30b", 0xc8, 0xffffffffffffffff)
keyctl$assume_authority(0x10, r1)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
write$smack_current(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x81)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000}, {{@in6, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x0, 0x0, 0x0, 0x10006}}, 0xe8)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x200000000000000, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000007e00), 0x400000000000058, 0x0)

01:21:29 executing program 1:
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200))
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)
ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006)
timer_settime(0x0, 0x0, 0x0, &(0x7f0000000380))
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0xfffffffffffffda7)
bind$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10)

01:21:29 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
r1 = dup(r0)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4)
removexattr(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=@known='trusted.overlay.impure\x00')
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$unix(0x1, 0x100000002005, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
mkdirat$cgroup(r3, &(0x7f0000000080)='3yz0\x00', 0x1ff)
fchdir(r3)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000280)='./file0\x00', 0x0)
write$FUSE_LSEEK(r2, 0x0, 0x0)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000200))
r4 = syz_open_dev$vcsn(0x0, 0x800, 0x80040)
io_setup(0x6, &(0x7f00000000c0))
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={r4, 0x2, 0x1, 0x2, &(0x7f00000001c0)=[0x0], 0x1}, 0x20)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000600)=0xe8)
fsetxattr$security_capability(r3, &(0x7f0000000240)='security.capability\x00', &(0x7f0000000640)=@v3={0x3000000, [{}, {0x401, 0x7}], r5}, 0x18, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getpeername(r1, &(0x7f0000000340)=@rc, &(0x7f0000000140)=0x80)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x400, 0x0)
setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000005c0), 0xfffffffffffffe26)
write$apparmor_exec(r1, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x1)
socket$alg(0x26, 0x5, 0x0)

01:21:29 executing program 1:
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200))
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)
ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006)
timer_settime(0x0, 0x0, 0x0, &(0x7f0000000380))
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0xfffffffffffffda7)
bind$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10)

01:21:29 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
r1 = dup(r0)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4)
removexattr(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=@known='trusted.overlay.impure\x00')
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$unix(0x1, 0x100000002005, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
mkdirat$cgroup(r3, &(0x7f0000000080)='3yz0\x00', 0x1ff)
fchdir(r3)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000280)='./file0\x00', 0x0)
write$FUSE_LSEEK(r2, 0x0, 0x0)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000200))
r4 = syz_open_dev$vcsn(0x0, 0x800, 0x80040)
io_setup(0x6, &(0x7f00000000c0))
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={r4, 0x2, 0x1, 0x2, &(0x7f00000001c0)=[0x0], 0x1}, 0x20)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000600)=0xe8)
fsetxattr$security_capability(r3, &(0x7f0000000240)='security.capability\x00', &(0x7f0000000640)=@v3={0x3000000, [{}, {0x401, 0x7}], r5}, 0x18, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getpeername(r1, &(0x7f0000000340)=@rc, &(0x7f0000000140)=0x80)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x400, 0x0)
setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000005c0), 0xfffffffffffffe26)
write$apparmor_exec(r1, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x1)
socket$alg(0x26, 0x5, 0x0)

01:21:30 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
r1 = dup(r0)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4)
removexattr(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=@known='trusted.overlay.impure\x00')
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$unix(0x1, 0x100000002005, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
mkdirat$cgroup(r3, &(0x7f0000000080)='3yz0\x00', 0x1ff)
fchdir(r3)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000280)='./file0\x00', 0x0)
write$FUSE_LSEEK(r2, 0x0, 0x0)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000200))
r4 = syz_open_dev$vcsn(0x0, 0x800, 0x80040)
io_setup(0x6, &(0x7f00000000c0))
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={r4, 0x2, 0x1, 0x2, &(0x7f00000001c0)=[0x0], 0x1}, 0x20)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000600)=0xe8)
fsetxattr$security_capability(r3, &(0x7f0000000240)='security.capability\x00', &(0x7f0000000640)=@v3={0x3000000, [{}, {0x401, 0x7}], r5}, 0x18, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getpeername(r1, &(0x7f0000000340)=@rc, &(0x7f0000000140)=0x80)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x400, 0x0)
setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000005c0), 0xfffffffffffffe26)
write$apparmor_exec(r1, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x1)
socket$alg(0x26, 0x5, 0x0)

01:21:30 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
r1 = dup(r0)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4)
removexattr(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=@known='trusted.overlay.impure\x00')
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$unix(0x1, 0x100000002005, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
mkdirat$cgroup(r3, &(0x7f0000000080)='3yz0\x00', 0x1ff)
fchdir(r3)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000280)='./file0\x00', 0x0)
write$FUSE_LSEEK(r2, 0x0, 0x0)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000200))
r4 = syz_open_dev$vcsn(0x0, 0x800, 0x80040)
io_setup(0x6, &(0x7f00000000c0))
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={r4, 0x2, 0x1, 0x2, &(0x7f00000001c0)=[0x0], 0x1}, 0x20)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000600)=0xe8)
fsetxattr$security_capability(r3, &(0x7f0000000240)='security.capability\x00', &(0x7f0000000640)=@v3={0x3000000, [{}, {0x401, 0x7}], r5}, 0x18, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getpeername(r1, &(0x7f0000000340)=@rc, &(0x7f0000000140)=0x80)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x400, 0x0)
setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000005c0), 0xfffffffffffffe26)
write$apparmor_exec(r1, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x1)
socket$alg(0x26, 0x5, 0x0)

01:21:30 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
r1 = dup(r0)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4)
removexattr(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=@known='trusted.overlay.impure\x00')
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$unix(0x1, 0x100000002005, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
mkdirat$cgroup(r3, &(0x7f0000000080)='3yz0\x00', 0x1ff)
fchdir(r3)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000280)='./file0\x00', 0x0)
write$FUSE_LSEEK(r2, 0x0, 0x0)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000200))
r4 = syz_open_dev$vcsn(0x0, 0x800, 0x80040)
io_setup(0x6, &(0x7f00000000c0))
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={r4, 0x2, 0x1, 0x2, &(0x7f00000001c0)=[0x0], 0x1}, 0x20)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000600)=0xe8)
fsetxattr$security_capability(r3, &(0x7f0000000240)='security.capability\x00', &(0x7f0000000640)=@v3={0x3000000, [{}, {0x401, 0x7}], r5}, 0x18, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getpeername(r1, &(0x7f0000000340)=@rc, &(0x7f0000000140)=0x80)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x400, 0x0)
setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000005c0), 0xfffffffffffffe26)
write$apparmor_exec(r1, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x1)
socket$alg(0x26, 0x5, 0x0)

01:21:30 executing program 4:
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f00000004c0))
r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000280), 0x4)
syz_genetlink_get_family_id$fou(&(0x7f0000000540)='fou\x00')
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40041)
dup3(r0, 0xffffffffffffffff, 0x1004)
r1 = add_key(&(0x7f0000000340)='trusted\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000000840)="53c81016d019133b847beb288e0fee533f57ab957d485a1786c245f3f0c68a5ca5134e62d67f928e4734b7c8e1b11a2740c1d67205dec26e4f91d20da4edc4037eca3f393b5028c3d03bb3ca7aa6a05dda4c1e961e07de74a9a4b5bf9b7a56307b37d88aeba50b83c0c09f851264b66d7ff2f7df47e8c6b504b6853aaa38fdc567e11276140d0a9f952551bb29a1f6a5c5e3806bd08f6bf394e2b94d58bba4a7ed7e8814e383e11dfc916573dda22fc1a6774dd6ab7bebbf7801f1eb025b56e371a1e9ec789ee30b", 0xc8, 0xffffffffffffffff)
keyctl$assume_authority(0x10, r1)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
write$smack_current(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x81)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000}, {{@in6, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x0, 0x0, 0x0, 0x10006}}, 0xe8)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x200000000000000, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000007e00), 0x400000000000058, 0x0)

01:21:30 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
r1 = dup(r0)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4)
removexattr(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=@known='trusted.overlay.impure\x00')
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$unix(0x1, 0x100000002005, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
mkdirat$cgroup(r3, &(0x7f0000000080)='3yz0\x00', 0x1ff)
fchdir(r3)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000280)='./file0\x00', 0x0)
write$FUSE_LSEEK(r2, 0x0, 0x0)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000200))
r4 = syz_open_dev$vcsn(0x0, 0x800, 0x80040)
io_setup(0x6, &(0x7f00000000c0))
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={r4, 0x2, 0x1, 0x2, &(0x7f00000001c0)=[0x0], 0x1}, 0x20)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000600)=0xe8)
fsetxattr$security_capability(r3, &(0x7f0000000240)='security.capability\x00', &(0x7f0000000640)=@v3={0x3000000, [{}, {0x401, 0x7}], r5}, 0x18, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getpeername(r1, &(0x7f0000000340)=@rc, &(0x7f0000000140)=0x80)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x400, 0x0)
setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000005c0), 0xfffffffffffffe26)
write$apparmor_exec(r1, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x1)
socket$alg(0x26, 0x5, 0x0)

01:21:30 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
r1 = dup(r0)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4)
removexattr(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=@known='trusted.overlay.impure\x00')
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$unix(0x1, 0x100000002005, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
mkdirat$cgroup(r3, &(0x7f0000000080)='3yz0\x00', 0x1ff)
fchdir(r3)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000280)='./file0\x00', 0x0)
write$FUSE_LSEEK(r2, 0x0, 0x0)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000200))
r4 = syz_open_dev$vcsn(0x0, 0x800, 0x80040)
io_setup(0x6, &(0x7f00000000c0))
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={r4, 0x2, 0x1, 0x2, &(0x7f00000001c0)=[0x0], 0x1}, 0x20)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000600)=0xe8)
fsetxattr$security_capability(r3, &(0x7f0000000240)='security.capability\x00', &(0x7f0000000640)=@v3={0x3000000, [{}, {0x401, 0x7}], r5}, 0x18, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getpeername(r1, &(0x7f0000000340)=@rc, &(0x7f0000000140)=0x80)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x400, 0x0)
setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000005c0), 0xfffffffffffffe26)
write$apparmor_exec(r1, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x1)
socket$alg(0x26, 0x5, 0x0)

01:21:30 executing program 2:
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000080))
r1 = socket$inet6(0xa, 0x2000000000000001, 0x10001)
bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e22, 0x0, @ipv4}, 0x1c)
listen(r1, 0x3)
r2 = socket$inet6_sctp(0xa, 0x400005, 0x84)
sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_IRQP_SET(r4, 0x4004700c, 0x349)
r5 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r5, 0x20000003)
r6 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r6, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r7 = accept4(r5, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0)
write$binfmt_elf64(r7, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x916)
setsockopt$inet6_opts(r7, 0x29, 0x37, &(0x7f0000000a80)=ANY=[@ANYBLOB="a945d4856e0c93889d1a0e5384276411cab760f094e759b7987f8e457a50b92286c93ddc8e93dc2538038984836cabfc4789c558a21d021e33bd4c869670cacd748c95f16e58a57f191bd366969e232f408f7632bd8e83c47905f09dfebaec1bf0cbeda5bd0a42ea8802"], 0x1)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, &(0x7f0000000a40)={0x2, &(0x7f0000000900)=[{}, {}]})
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000840)='/dev/qat_adf_ctl\x00', 0x44000, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1010, 0xffffffffffffffff, 0x1)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x0, 0x0)
mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x4)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f0000000880)={{0x4, 0x8001}, 0x1, 0x9, 0x0, {0x70d}, 0x1})

01:21:30 executing program 1:
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200))
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)
ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006)
timer_settime(0x0, 0x0, 0x0, &(0x7f0000000380))
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0xfffffffffffffda7)
bind$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10)

01:21:30 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
r1 = dup(r0)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4)
removexattr(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=@known='trusted.overlay.impure\x00')
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$unix(0x1, 0x100000002005, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
mkdirat$cgroup(r3, &(0x7f0000000080)='3yz0\x00', 0x1ff)
fchdir(r3)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000280)='./file0\x00', 0x0)
write$FUSE_LSEEK(r2, 0x0, 0x0)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000200))
r4 = syz_open_dev$vcsn(0x0, 0x800, 0x80040)
io_setup(0x6, &(0x7f00000000c0))
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={r4, 0x2, 0x1, 0x2, &(0x7f00000001c0)=[0x0], 0x1}, 0x20)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000600)=0xe8)
fsetxattr$security_capability(r3, &(0x7f0000000240)='security.capability\x00', &(0x7f0000000640)=@v3={0x3000000, [{}, {0x401, 0x7}], r5}, 0x18, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getpeername(r1, &(0x7f0000000340)=@rc, &(0x7f0000000140)=0x80)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x400, 0x0)
setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000005c0), 0xfffffffffffffe26)
write$apparmor_exec(r1, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x1)
socket$alg(0x26, 0x5, 0x0)

01:21:31 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
r1 = dup(r0)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4)
removexattr(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=@known='trusted.overlay.impure\x00')
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$unix(0x1, 0x100000002005, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
mkdirat$cgroup(r3, &(0x7f0000000080)='3yz0\x00', 0x1ff)
fchdir(r3)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000280)='./file0\x00', 0x0)
write$FUSE_LSEEK(r2, 0x0, 0x0)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000200))
r4 = syz_open_dev$vcsn(0x0, 0x800, 0x80040)
io_setup(0x6, &(0x7f00000000c0))
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={r4, 0x2, 0x1, 0x2, &(0x7f00000001c0)=[0x0], 0x1}, 0x20)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000600)=0xe8)
fsetxattr$security_capability(r3, &(0x7f0000000240)='security.capability\x00', &(0x7f0000000640)=@v3={0x3000000, [{}, {0x401, 0x7}], r5}, 0x18, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getpeername(r1, &(0x7f0000000340)=@rc, &(0x7f0000000140)=0x80)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x400, 0x0)
setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000005c0), 0xfffffffffffffe26)
write$apparmor_exec(r1, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x1)
socket$alg(0x26, 0x5, 0x0)

[  611.458570] dccp_close: ABORT with 4652 bytes unread
01:21:31 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
r1 = dup(r0)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4)
removexattr(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=@known='trusted.overlay.impure\x00')
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$unix(0x1, 0x100000002005, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
mkdirat$cgroup(r3, &(0x7f0000000080)='3yz0\x00', 0x1ff)
fchdir(r3)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000280)='./file0\x00', 0x0)
write$FUSE_LSEEK(r2, 0x0, 0x0)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000200))
r4 = syz_open_dev$vcsn(0x0, 0x800, 0x80040)
io_setup(0x6, &(0x7f00000000c0))
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={r4, 0x2, 0x1, 0x2, &(0x7f00000001c0)=[0x0], 0x1}, 0x20)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000600)=0xe8)
fsetxattr$security_capability(r3, &(0x7f0000000240)='security.capability\x00', &(0x7f0000000640)=@v3={0x3000000, [{}, {0x401, 0x7}], r5}, 0x18, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getpeername(r1, &(0x7f0000000340)=@rc, &(0x7f0000000140)=0x80)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x400, 0x0)
setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000005c0), 0xfffffffffffffe26)
write$apparmor_exec(r1, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x1)
socket$alg(0x26, 0x5, 0x0)

01:21:31 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
r1 = dup(r0)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4)
removexattr(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=@known='trusted.overlay.impure\x00')
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$unix(0x1, 0x100000002005, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
mkdirat$cgroup(r3, &(0x7f0000000080)='3yz0\x00', 0x1ff)
fchdir(r3)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000280)='./file0\x00', 0x0)
write$FUSE_LSEEK(r2, 0x0, 0x0)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000200))
r4 = syz_open_dev$vcsn(0x0, 0x800, 0x80040)
io_setup(0x6, &(0x7f00000000c0))
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={r4, 0x2, 0x1, 0x2, &(0x7f00000001c0)=[0x0], 0x1}, 0x20)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000600)=0xe8)
fsetxattr$security_capability(r3, &(0x7f0000000240)='security.capability\x00', &(0x7f0000000640)=@v3={0x3000000, [{}, {0x401, 0x7}], r5}, 0x18, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getpeername(r1, &(0x7f0000000340)=@rc, &(0x7f0000000140)=0x80)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x400, 0x0)
setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000005c0), 0xfffffffffffffe26)
write$apparmor_exec(r1, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x1)
socket$alg(0x26, 0x5, 0x0)

01:21:31 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
r1 = dup(r0)
write(r1, &(0x7f00000003c0)="240000005a001f00ffc34900002305000a04f51105000100020100020800028001c9a800", 0x24)

01:21:31 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0)
write(r0, &(0x7f0000000400)="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", 0x200)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x0, 0x900, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000600)={0x1a, {{0xa, 0x4e20, 0x401, @local}}}, 0x90)
openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/51)
r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000540), 0x4)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1000002, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x0)
write(r2, &(0x7f0000411000)="bc", 0x1)
ioctl$TCXONC(r2, 0x540a, 0x3)
ioctl$TCXONC(r2, 0x540a, 0x1)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
ioprio_set$pid(0x0, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'bridge_slave_0\x00'})

01:21:31 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6)
r1 = dup(r0)
ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000740))

[  611.878927] netlink: 'syz-executor2': attribute type 1 has an invalid length.
[  611.892412] audit: type=1800 audit(1548120091.703:145): pid=25003 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor5" name="file0" dev="sda1" ino=16784 res=0
01:21:31 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6)
r1 = dup(r0)
ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000740))

[  611.988816] netlink: 'syz-executor2': attribute type 1 has an invalid length.
01:21:31 executing program 2:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0))
dup(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000080)='3yz0\x00', 0x1ff)
fchdir(r0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000280)='./file0\x00', 0x0)
r1 = syz_open_dev$vcsn(0x0, 0x800, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, 0x0, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000002c0)={0x56, 0x5826, 0x9, {0x45f17190, 0x6}, {0x4000000fa27, 0x1000000}, @cond=[{0x0, 0x0, 0x4, 0x2, 0x7, 0xd19}, {0x1, 0x0, 0x0, 0x651e, 0x1ff, 0x7}]})

[  612.033039] audit: type=1804 audit(1548120091.743:146): pid=25003 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir309218716/syzkaller.Ger55I/663/file0" dev="sda1" ino=16784 res=1
01:21:31 executing program 3:
clock_adjtime(0x0, &(0x7f0000000000)={0x1d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf423f})

01:21:32 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
fcntl$getflags(r0, 0x401)
sysinfo(&(0x7f00000007c0)=""/154)
r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000001c0)={0x0, 0x6, 0x3})
ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d)
ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)})
alarm(0x2)
connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1}, 0x6e)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x20000004e23, @dev}, 0x10)
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000005c0)="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")
accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000340)=0x1c)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x8)
ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x18b5, 0xcd, 0x5, 0x42fc})
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x101, 0x12)
request_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x6)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x3a)
connect$inet6(r3, &(0x7f0000002fe4)={0xa, 0x0, 0x0, @empty, 0xc}, 0x1c)
sendto(0xffffffffffffffff, &(0x7f0000000400)="4b3faa4d52ff968a52bf58a3eddbaae09b177e1081120df96e8da8d2dc7bea5f", 0x20, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000140))
setxattr(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00')

01:21:32 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6)
r1 = dup(r0)
ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000740))

[  612.443516] audit: type=1800 audit(1548120091.743:147): pid=25003 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor5" name="file0" dev="sda1" ino=16784 res=0
01:21:34 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x34, 0x829, 0x0, 0x0, {0x2, 0x1000000}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0)

[  612.533830] bridge0: port 1(bridge_slave_0) entered disabled state
[  612.652038] audit: type=1804 audit(1548120094.464:148): pid=25003 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir309218716/syzkaller.Ger55I/663/file0" dev="sda1" ino=16784 res=1
01:21:34 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6)
r1 = dup(r0)
ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000740))

01:21:34 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c)
setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000080)=0x7ff, 0x4)
sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000680)="65c98ddaaece527eb6fa0488bd29115dd10013aeaa07b700b461d9ae393ffc8ed9759fb154a4d3b5", 0x28}], 0x1}}], 0x1, 0x0)

01:21:34 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
fcntl$getflags(r0, 0x401)
sysinfo(&(0x7f00000007c0)=""/154)
r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000001c0)={0x0, 0x6, 0x3})
ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d)
ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)})
alarm(0x2)
connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1}, 0x6e)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x20000004e23, @dev}, 0x10)
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000005c0)="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")
accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000340)=0x1c)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x8)
ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x18b5, 0xcd, 0x5, 0x42fc})
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x101, 0x12)
request_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x6)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x3a)
connect$inet6(r3, &(0x7f0000002fe4)={0xa, 0x0, 0x0, @empty, 0xc}, 0x1c)
sendto(0xffffffffffffffff, &(0x7f0000000400)="4b3faa4d52ff968a52bf58a3eddbaae09b177e1081120df96e8da8d2dc7bea5f", 0x20, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000140))
setxattr(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00')

01:21:34 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
fcntl$getflags(r0, 0x401)
sysinfo(&(0x7f00000007c0)=""/154)
r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000001c0)={0x0, 0x6, 0x3})
ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d)
ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)})
alarm(0x2)
connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1}, 0x6e)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x20000004e23, @dev}, 0x10)
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000005c0)="9ea79a88bdfc7950f6f00f040767fa643868b60676f449aeccb08dbb5cdd05b701751a26822b51aa61da3305ac083526f67837ff84c02d37f63f74ccbe5c757122575d6e9fba978c5978dda7a441b171f59467e9b6d8c6248bb1c3ec5a3e68e53e4ee137aed88897142ae773543394bcad777779e3ac3a8e1b4ff92f0692300b901a625418c5bfb856d421325897ac9fbe53665ccc602495ef590616d6050e5c48d99f009e2ad04ad144073b29ea3f1531c706d35b0853b3ed17d232cf08505f0497253b2cfdbeb7766a344e623316799d67133854b0eb8922943be74f52dfa63ae5e5e6603b75994caa26bc3ebe4e00d5fee711c06c18aaaafd438df7c327c0")
accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000340)=0x1c)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x8)
ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x18b5, 0xcd, 0x5, 0x42fc})
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x101, 0x12)
request_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x6)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x3a)
connect$inet6(r3, &(0x7f0000002fe4)={0xa, 0x0, 0x0, @empty, 0xc}, 0x1c)
sendto(0xffffffffffffffff, &(0x7f0000000400)="4b3faa4d52ff968a52bf58a3eddbaae09b177e1081120df96e8da8d2dc7bea5f", 0x20, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000140))
setxattr(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00')

[  612.723701] audit: type=1800 audit(1548120094.464:149): pid=25003 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor5" name="file0" dev="sda1" ino=16784 res=0
01:21:34 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = getpid()
setpriority(0x2, r3, 0x0)

01:21:34 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0)
write(r0, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x0, 0x900, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000600)={0x1a, {{0xa, 0x4e20, 0x401, @local}}}, 0x90)
openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/51)
r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000540), 0x4)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1000002, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x0)
write(r2, &(0x7f0000411000)="bc", 0x1)
ioctl$TCXONC(r2, 0x540a, 0x3)
ioctl$TCXONC(r2, 0x540a, 0x1)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
ioprio_set$pid(0x0, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'bridge_slave_0\x00'})

01:21:34 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
sched_setaffinity(0x0, 0xffffffffffffffcd, &(0x7f0000000140)=0x5)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
chown(&(0x7f00000001c0)='./file0\x00', r1, r2)
mount$bpf(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='bpf\x00', 0x20040, &(0x7f00000004c0)={[{@mode={'mode', 0x3d, 0xff}}, {@mode={'mode', 0x3d, 0xc6a2}}], [{@euid_eq={'euid', 0x3d, r1}}, {@uid_gt={'uid>', r1}}, {@audit='audit'}, {@obj_role={'obj_role', 0x3d, 'tmpfs\x00'}}]})
lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [{0x2, 0x2, r1}], {0x4, 0x7}, [{0x8, 0x0, r2}, {0x8, 0x4, r2}, {0x8, 0x0, r2}], {0x10, 0x2}, {0x20, 0x1}}, 0x44, 0x1)
fcntl$setpipe(r0, 0x407, 0x6)
chdir(&(0x7f0000000340)='./file0\x00')
fremovexattr(r0, &(0x7f0000000040)=@random={'osx.', 'eth1vmnet0keyringGPL+)\x00'})
delete_module(&(0x7f0000000640)='\x00', 0x200)
symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00')
clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff)
lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680))

01:21:34 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000001840))

01:21:34 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
fcntl$getflags(r0, 0x401)
sysinfo(&(0x7f00000007c0)=""/154)
r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000001c0)={0x0, 0x6, 0x3})
ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d)
ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)})
alarm(0x2)
connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1}, 0x6e)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x20000004e23, @dev}, 0x10)
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000005c0)="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")
accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000340)=0x1c)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x8)
ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x18b5, 0xcd, 0x5, 0x42fc})
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x101, 0x12)
request_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x6)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x3a)
connect$inet6(r3, &(0x7f0000002fe4)={0xa, 0x0, 0x0, @empty, 0xc}, 0x1c)
sendto(0xffffffffffffffff, &(0x7f0000000400)="4b3faa4d52ff968a52bf58a3eddbaae09b177e1081120df96e8da8d2dc7bea5f", 0x20, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000140))
setxattr(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00')

01:21:34 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
fcntl$getflags(r0, 0x401)
sysinfo(&(0x7f00000007c0)=""/154)
r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000001c0)={0x0, 0x6, 0x3})
ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d)
ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)})
alarm(0x2)
connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1}, 0x6e)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x20000004e23, @dev}, 0x10)
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000005c0)="9ea79a88bdfc7950f6f00f040767fa643868b60676f449aeccb08dbb5cdd05b701751a26822b51aa61da3305ac083526f67837ff84c02d37f63f74ccbe5c757122575d6e9fba978c5978dda7a441b171f59467e9b6d8c6248bb1c3ec5a3e68e53e4ee137aed88897142ae773543394bcad777779e3ac3a8e1b4ff92f0692300b901a625418c5bfb856d421325897ac9fbe53665ccc602495ef590616d6050e5c48d99f009e2ad04ad144073b29ea3f1531c706d35b0853b3ed17d232cf08505f0497253b2cfdbeb7766a344e623316799d67133854b0eb8922943be74f52dfa63ae5e5e6603b75994caa26bc3ebe4e00d5fee711c06c18aaaafd438df7c327c0")
accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000340)=0x1c)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x8)
ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x18b5, 0xcd, 0x5, 0x42fc})
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x101, 0x12)
request_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x6)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x3a)
connect$inet6(r3, &(0x7f0000002fe4)={0xa, 0x0, 0x0, @empty, 0xc}, 0x1c)
sendto(0xffffffffffffffff, &(0x7f0000000400)="4b3faa4d52ff968a52bf58a3eddbaae09b177e1081120df96e8da8d2dc7bea5f", 0x20, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000140))
setxattr(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00')

[  613.056091] audit: type=1800 audit(1548120094.864:150): pid=25070 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor5" name="file0" dev="sda1" ino=17073 res=0
01:21:34 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0)
write(r0, &(0x7f0000000400)="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", 0x200)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x0, 0x900, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000600)={0x1a, {{0xa, 0x4e20, 0x401, @local}}}, 0x90)
openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/51)
r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000540), 0x4)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1000002, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x0)
write(r2, &(0x7f0000411000)="bc", 0x1)
ioctl$TCXONC(r2, 0x540a, 0x3)
ioctl$TCXONC(r2, 0x540a, 0x1)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
ioprio_set$pid(0x0, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'bridge_slave_0\x00'})

01:21:34 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0)
write(r0, &(0x7f0000000400)="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", 0x200)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x0, 0x900, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000600)={0x1a, {{0xa, 0x4e20, 0x401, @local}}}, 0x90)
openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/51)
r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000540), 0x4)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1000002, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x0)
write(r2, &(0x7f0000411000)="bc", 0x1)
ioctl$TCXONC(r2, 0x540a, 0x3)
ioctl$TCXONC(r2, 0x540a, 0x1)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
ioprio_set$pid(0x0, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'bridge_slave_0\x00'})

01:21:35 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
sched_setaffinity(0x0, 0xffffffffffffffcd, &(0x7f0000000140)=0x5)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
chown(&(0x7f00000001c0)='./file0\x00', r1, r2)
mount$bpf(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='bpf\x00', 0x20040, &(0x7f00000004c0)={[{@mode={'mode', 0x3d, 0xff}}, {@mode={'mode', 0x3d, 0xc6a2}}], [{@euid_eq={'euid', 0x3d, r1}}, {@uid_gt={'uid>', r1}}, {@audit='audit'}, {@obj_role={'obj_role', 0x3d, 'tmpfs\x00'}}]})
lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [{0x2, 0x2, r1}], {0x4, 0x7}, [{0x8, 0x0, r2}, {0x8, 0x4, r2}, {0x8, 0x0, r2}], {0x10, 0x2}, {0x20, 0x1}}, 0x44, 0x1)
fcntl$setpipe(r0, 0x407, 0x6)
chdir(&(0x7f0000000340)='./file0\x00')
fremovexattr(r0, &(0x7f0000000040)=@random={'osx.', 'eth1vmnet0keyringGPL+)\x00'})
delete_module(&(0x7f0000000640)='\x00', 0x200)
symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00')
clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff)
lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680))

01:21:35 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
fcntl$getflags(r0, 0x401)
sysinfo(&(0x7f00000007c0)=""/154)
r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000001c0)={0x0, 0x6, 0x3})
ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d)
ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)})
alarm(0x2)
connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1}, 0x6e)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x20000004e23, @dev}, 0x10)
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000005c0)="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")
accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000340)=0x1c)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x8)
ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x18b5, 0xcd, 0x5, 0x42fc})
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x101, 0x12)
request_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x6)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x3a)
connect$inet6(r3, &(0x7f0000002fe4)={0xa, 0x0, 0x0, @empty, 0xc}, 0x1c)
sendto(0xffffffffffffffff, &(0x7f0000000400)="4b3faa4d52ff968a52bf58a3eddbaae09b177e1081120df96e8da8d2dc7bea5f", 0x20, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000140))
setxattr(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00')

[  613.200227] audit: type=1804 audit(1548120094.904:151): pid=25070 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir309218716/syzkaller.Ger55I/664/file0" dev="sda1" ino=17073 res=1
[  613.282688] audit: type=1800 audit(1548120094.904:152): pid=25070 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor5" name="file0" dev="sda1" ino=17073 res=0
[  613.321062] audit: type=1800 audit(1548120095.124:153): pid=25090 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor2" name="file0" dev="sda1" ino=16900 res=0
01:21:35 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
fcntl$getflags(r0, 0x401)
sysinfo(&(0x7f00000007c0)=""/154)
r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000001c0)={0x0, 0x6, 0x3})
ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d)
ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)})
alarm(0x2)
connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1}, 0x6e)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x20000004e23, @dev}, 0x10)
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000005c0)="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")
accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000340)=0x1c)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x8)
ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x18b5, 0xcd, 0x5, 0x42fc})
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000880)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000009f00000009009ea690858bfb92c4925e59511d2128a26cae33f48d67b991621df681c0e5e56f5704d56fb1cf1f353403e8df243529848f54067b8ab368668a75f84e73f48bf424698aeda146e9c9a8ce6ad1a0a4b9de624c47f776c49f9f888d2705c886dc49d79c50731b87fb47babed83fbad8ac5119c18f5909e69eeb39a623e4b9eae95df08502364c64f024ad67e0fd9d1ecdc1eaa681ef0c9611d6b51fbc724cb036cdf7ece7905b239462df5861a7c6ea7126d06247bf85555274be40e6c6f070025976d979fae1d68987668c012e261657b1bf3885c096f60057ad1c5d4fde889350d67587ebc6ce656ef7f99a2043691220b63b81e6a162b246716af930d2ff9f496cc03dafbb601bbe44cbbe9eabfe6dce7303f4351842332b91af639f482563bf2ef46f8cf621738532b4afd964f09c3702b0320945feb48c2fd79a53860f0eaa739aacb1b5eeb9e3605ba70b57f3bfb99dae6b17bb1a1e15d9cbbc3a491bbb1da00badbbc9902957e39cf3d3dac79ae085471c9ca6c13ce52d43d10d1048d110b56d562722754edac6d85f5edebd81b22c700400000000000000fdc05a98657239f309fce487ae8b507b9c97636366a485a04207c33476523c969c2a79b48f2009554ab88c71bd32010a2e3a48ad1fb4ec12ebbc90d7903a4f34dd0541e1379641ccf7ab91153d652d48aa9ed633f5e320fb681e85fcb2b8c31b5578f32efbc3a917ecf18219cb2b6a1056fb6fb9c27a6685aaaab9dd122c9d7e5558cd3e7999683c3c5768e20777fadd53a47b92c527e5f19f999c5afe210e334cea7761d4c1e2d660a40434993c12417b224bd28e5d7c059e4339498c406c3eb6625b5f843a326bc1846a9d321a8415dc5ee2f35a451e9f033d636395f15fcd8e0ab822c0329e0864e355e11be6a6f0b5b7f23f057fd01c327efaf38ee5f36aefd50a16a0ce4606b6a627dcc9d44c7cfcc154c8d249eb879e00c1401e48eec86b23c046fc30f26b6b2f5e98e276a9e36c94f1c822ab98307c31a0519b70efc085d8ea0a64e5a3c79767a9614f84f23a15ca0b54582218df2bf8fedd1ca51101f4e86258f0df6ad37d8d59ef63d6cc1002bd7fe7732f2ee39b03ff1f76003cf13838b8bf6ad1071379b72d9f734fad41287fddc4ee7f666724c62372743486ea43e74ae5e6fa01c75f3d010000006311c23389a640a597e294bc50f18080ea4cde884334d76fae76b9c574b975d006a806920671cecde6ecd8fa9735a8a4de731549f6265064158ce366f19876a29cb6d903aa8622c242aad9b6dd9356e316829cd2857c638cc29c7ddadff083ed521c23e69fa14d73f296d4095d979d4da74a3343cb228aa9e65051cea4fa20b6a6058cf525e2304c12eaa4078417c24bea81bd71182df565bda5a5228d82bc6fe810aec68927caa4f6a034ebec6c905036e05047a7991e26032751809cbc256532d4bc1b865dac0d0a5e704cafe436b1c8bdb8f622b0c61751d0f3546f7b4b71d00d9d928f5f0bd444b41c9b488fed438847c0a8c74505cb02d0916f50f9682cceee062e85e0584d6b0fadf9c3fc40e078d1380525eed4539e"], 0x0)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x101, 0x12)
request_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x6)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x3a)
connect$inet6(r3, &(0x7f0000002fe4)={0xa, 0x0, 0x0, @empty, 0xc}, 0x1c)
sendto(0xffffffffffffffff, &(0x7f0000000400)="4b3faa4d52ff968a52bf58a3eddbaae09b177e1081120df96e8da8d2dc7bea5f", 0x20, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000140))
setxattr(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00')

01:21:35 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
sched_setaffinity(0x0, 0xffffffffffffffcd, &(0x7f0000000140)=0x5)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
chown(&(0x7f00000001c0)='./file0\x00', r1, r2)
mount$bpf(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='bpf\x00', 0x20040, &(0x7f00000004c0)={[{@mode={'mode', 0x3d, 0xff}}, {@mode={'mode', 0x3d, 0xc6a2}}], [{@euid_eq={'euid', 0x3d, r1}}, {@uid_gt={'uid>', r1}}, {@audit='audit'}, {@obj_role={'obj_role', 0x3d, 'tmpfs\x00'}}]})
lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [{0x2, 0x2, r1}], {0x4, 0x7}, [{0x8, 0x0, r2}, {0x8, 0x4, r2}, {0x8, 0x0, r2}], {0x10, 0x2}, {0x20, 0x1}}, 0x44, 0x1)
fcntl$setpipe(r0, 0x407, 0x6)
chdir(&(0x7f0000000340)='./file0\x00')
fremovexattr(r0, &(0x7f0000000040)=@random={'osx.', 'eth1vmnet0keyringGPL+)\x00'})
delete_module(&(0x7f0000000640)='\x00', 0x200)
symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00')
clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff)
lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680))

[  613.414292] audit: type=1804 audit(1548120095.124:154): pid=25090 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir922648436/syzkaller.fMJxp2/654/file0" dev="sda1" ino=16900 res=1
01:21:35 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0)
write(r0, &(0x7f0000000400)="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", 0x200)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x0, 0x900, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000600)={0x1a, {{0xa, 0x4e20, 0x401, @local}}}, 0x90)
openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/51)
r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000540), 0x4)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1000002, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x0)
write(r2, &(0x7f0000411000)="bc", 0x1)
ioctl$TCXONC(r2, 0x540a, 0x3)
ioctl$TCXONC(r2, 0x540a, 0x1)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
ioprio_set$pid(0x0, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'bridge_slave_0\x00'})

[  613.546335] protocol 88fb is buggy, dev hsr_slave_0
[  613.551627] protocol 88fb is buggy, dev hsr_slave_1
[  613.626224] protocol 88fb is buggy, dev hsr_slave_0
[  613.631462] protocol 88fb is buggy, dev hsr_slave_1
01:21:35 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
sched_setaffinity(0x0, 0xffffffffffffffcd, &(0x7f0000000140)=0x5)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
chown(&(0x7f00000001c0)='./file0\x00', r1, r2)
mount$bpf(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='bpf\x00', 0x20040, &(0x7f00000004c0)={[{@mode={'mode', 0x3d, 0xff}}, {@mode={'mode', 0x3d, 0xc6a2}}], [{@euid_eq={'euid', 0x3d, r1}}, {@uid_gt={'uid>', r1}}, {@audit='audit'}, {@obj_role={'obj_role', 0x3d, 'tmpfs\x00'}}]})
lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [{0x2, 0x2, r1}], {0x4, 0x7}, [{0x8, 0x0, r2}, {0x8, 0x4, r2}, {0x8, 0x0, r2}], {0x10, 0x2}, {0x20, 0x1}}, 0x44, 0x1)
fcntl$setpipe(r0, 0x407, 0x6)
chdir(&(0x7f0000000340)='./file0\x00')
fremovexattr(r0, &(0x7f0000000040)=@random={'osx.', 'eth1vmnet0keyringGPL+)\x00'})
delete_module(&(0x7f0000000640)='\x00', 0x200)
symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00')
clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff)
lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680))

01:21:35 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)

[  614.026351] bridge0: port 1(bridge_slave_0) entered disabled state
01:21:35 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x2, 0x5, 0x0)
bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$int_in(r0, 0x5421, &(0x7f0000000900)=0x6)
sendto$inet(r0, &(0x7f0000000a00)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10)
getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00'})
fstat(0xffffffffffffffff, &(0x7f0000000440))
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a40)={{{@in=@dev, @in6}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000940)=0xe8)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000009c0)=0x14)
getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000001d00)={@broadcast, @multicast2}, &(0x7f0000001d40)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001ec0)={{{@in, @in6=@ipv4={[], [], @dev}}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000001fc0)=0xe8)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x86308013}, 0xc, &(0x7f0000002380)={&(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32], 0x3}}, 0x0)

01:21:36 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x2, 0x5, 0x0)
bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$int_in(r0, 0x5421, &(0x7f0000000900)=0x6)
sendto$inet(r0, &(0x7f0000000a00)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10)
getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00'})
fstat(0xffffffffffffffff, &(0x7f0000000440))
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a40)={{{@in=@dev, @in6}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000940)=0xe8)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000009c0)=0x14)
getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000001d00)={@broadcast, @multicast2}, &(0x7f0000001d40)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001ec0)={{{@in, @in6=@ipv4={[], [], @dev}}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000001fc0)=0xe8)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x86308013}, 0xc, &(0x7f0000002380)={&(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32], 0x3}}, 0x0)

01:21:36 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x2, 0x5, 0x0)
bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$int_in(r0, 0x5421, &(0x7f0000000900)=0x6)
sendto$inet(r0, &(0x7f0000000a00)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10)
getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00'})
fstat(0xffffffffffffffff, &(0x7f0000000440))
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a40)={{{@in=@dev, @in6}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000940)=0xe8)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000009c0)=0x14)
getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000001d00)={@broadcast, @multicast2}, &(0x7f0000001d40)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001ec0)={{{@in, @in6=@ipv4={[], [], @dev}}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000001fc0)=0xe8)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x86308013}, 0xc, &(0x7f0000002380)={&(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32], 0x3}}, 0x0)

[  614.500736] bridge0: port 1(bridge_slave_0) entered disabled state
01:21:36 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0)
write(r0, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x0, 0x900, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000600)={0x1a, {{0xa, 0x4e20, 0x401, @local}}}, 0x90)
openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/51)
r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000540), 0x4)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1000002, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x0)
write(r2, &(0x7f0000411000)="bc", 0x1)
ioctl$TCXONC(r2, 0x540a, 0x3)
ioctl$TCXONC(r2, 0x540a, 0x1)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
ioprio_set$pid(0x0, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'bridge_slave_0\x00'})

01:21:36 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0)
write(r0, &(0x7f0000000400)="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", 0x200)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x0, 0x900, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000600)={0x1a, {{0xa, 0x4e20, 0x401, @local}}}, 0x90)
openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/51)
r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000540), 0x4)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1000002, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x0)
write(r2, &(0x7f0000411000)="bc", 0x1)
ioctl$TCXONC(r2, 0x540a, 0x3)
ioctl$TCXONC(r2, 0x540a, 0x1)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
ioprio_set$pid(0x0, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'bridge_slave_0\x00'})

01:21:36 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x2, 0x5, 0x0)
bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$int_in(r0, 0x5421, &(0x7f0000000900)=0x6)
sendto$inet(r0, &(0x7f0000000a00)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10)
getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00'})
fstat(0xffffffffffffffff, &(0x7f0000000440))
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a40)={{{@in=@dev, @in6}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000940)=0xe8)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000009c0)=0x14)
getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000001d00)={@broadcast, @multicast2}, &(0x7f0000001d40)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001ec0)={{{@in, @in6=@ipv4={[], [], @dev}}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000001fc0)=0xe8)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x86308013}, 0xc, &(0x7f0000002380)={&(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32], 0x3}}, 0x0)

01:21:36 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x2, 0x5, 0x0)
bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$int_in(r0, 0x5421, &(0x7f0000000900)=0x6)
sendto$inet(r0, &(0x7f0000000a00)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10)
getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00'})
fstat(0xffffffffffffffff, &(0x7f0000000440))
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a40)={{{@in=@dev, @in6}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000940)=0xe8)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000009c0)=0x14)
getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000001d00)={@broadcast, @multicast2}, &(0x7f0000001d40)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001ec0)={{{@in, @in6=@ipv4={[], [], @dev}}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000001fc0)=0xe8)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x86308013}, 0xc, &(0x7f0000002380)={&(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32], 0x3}}, 0x0)

01:21:36 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0)
write(r0, &(0x7f0000000400)="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", 0x200)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x0, 0x900, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000600)={0x1a, {{0xa, 0x4e20, 0x401, @local}}}, 0x90)
openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/51)
r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000540), 0x4)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1000002, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x0)
write(r2, &(0x7f0000411000)="bc", 0x1)
ioctl$TCXONC(r2, 0x540a, 0x3)
ioctl$TCXONC(r2, 0x540a, 0x1)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
ioprio_set$pid(0x0, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'bridge_slave_0\x00'})

01:21:36 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x2, 0x5, 0x0)
bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$int_in(r0, 0x5421, &(0x7f0000000900)=0x6)
sendto$inet(r0, &(0x7f0000000a00)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10)
getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00'})
fstat(0xffffffffffffffff, &(0x7f0000000440))
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a40)={{{@in=@dev, @in6}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000940)=0xe8)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000009c0)=0x14)
getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000001d00)={@broadcast, @multicast2}, &(0x7f0000001d40)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001ec0)={{{@in, @in6=@ipv4={[], [], @dev}}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000001fc0)=0xe8)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x86308013}, 0xc, &(0x7f0000002380)={&(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32], 0x3}}, 0x0)

01:21:36 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100), 0x4)
r2 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
write$binfmt_script(r2, &(0x7f0000002ec0)={';!\xc9', './file0'}, 0xfdef)

01:21:36 executing program 3:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000003)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
close(r1)
accept4(r0, 0x0, 0x0, 0x0)
close(r1)

01:21:36 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0)
write(r0, &(0x7f0000000400)="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", 0x200)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x0, 0x900, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000600)={0x1a, {{0xa, 0x4e20, 0x401, @local}}}, 0x90)
openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/51)
r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000540), 0x4)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1000002, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x0)
write(r2, &(0x7f0000411000)="bc", 0x1)
ioctl$TCXONC(r2, 0x540a, 0x3)
ioctl$TCXONC(r2, 0x540a, 0x1)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
ioprio_set$pid(0x0, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'bridge_slave_0\x00'})

[  614.986256] protocol 88fb is buggy, dev hsr_slave_0
[  614.991400] protocol 88fb is buggy, dev hsr_slave_1
[  614.996544] protocol 88fb is buggy, dev hsr_slave_0
[  615.001651] protocol 88fb is buggy, dev hsr_slave_1
[  615.006864] protocol 88fb is buggy, dev hsr_slave_0
01:21:36 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x2, 0x5, 0x0)
bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$int_in(r0, 0x5421, &(0x7f0000000900)=0x6)
sendto$inet(r0, &(0x7f0000000a00)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10)
getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00'})
fstat(0xffffffffffffffff, &(0x7f0000000440))
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a40)={{{@in=@dev, @in6}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000940)=0xe8)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000009c0)=0x14)
getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000001d00)={@broadcast, @multicast2}, &(0x7f0000001d40)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001ec0)={{{@in, @in6=@ipv4={[], [], @dev}}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000001fc0)=0xe8)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x86308013}, 0xc, &(0x7f0000002380)={&(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32], 0x3}}, 0x0)

01:21:36 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x0, 0x0, 0x0, @sint={0x0, 0x10001}}]})
r2 = userfaultfd(0x0)
mmap$binder(&(0x7f000077e000/0x2000)=nil, 0x2000, 0x6, 0x10, 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
getpid()
ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000180))
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000140)={0x80000001})
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=<r3=>0x0)
sched_rr_get_interval(r3, &(0x7f0000000280))
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
r4 = gettid()
process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x2f4}], 0x100000000000013c, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034b389}], 0x1, 0x0)
close(r2)

01:21:36 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0)
write(r0, &(0x7f0000000400)="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", 0x200)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x0, 0x900, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000600)={0x1a, {{0xa, 0x4e20, 0x401, @local}}}, 0x90)
openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/51)
r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000540), 0x4)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1000002, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x0)
write(r2, &(0x7f0000411000)="bc", 0x1)
ioctl$TCXONC(r2, 0x540a, 0x3)
ioctl$TCXONC(r2, 0x540a, 0x1)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
ioprio_set$pid(0x0, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'bridge_slave_0\x00'})

01:21:37 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="2fa69c00000faa"])
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x9234f3486094b2bc, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")

01:21:37 executing program 0:
syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x7, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x29, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0)

01:21:37 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000001c0)={0x1, 0x0, 0x0})
write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}, 0x1, 0x400000000000038, 0x2}], 0xfe72)

01:21:37 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='memory.low\x00', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='pids.current\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000300)=ANY=[@ANYBLOB="5075806fda21e25d243618854506b606e1ccea6bbc3019c8e37a5074c44bcf35a6e1a4f007f6cfa37119033310bf27fc106e040c051643446ccad5c6a6b196e8cf1b4031006a1a40992a09a8c1c3357266f8902b41c42a00b8e900758ad3eedc22f15b42f5a6f91f072c36623581ccc904711b91be5abbd1a22ac179990b3b09562be21565ad5dbd0b5b0bc59109ff3e662a7e7cbe55e2f192977956eab841cd5374796743d4e874cc8e9b6ce507041354c32bd4ca7a3dc3d1f15c5c6ea15ce68874df68cf787e60577f0000000000"])
unshare(0x40000000)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001300))
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000001c0)="d4e30562576b33ac23485e14cdcab975eb8ea52eee5199ee34cf72624cee0ce0083b55655f64924a5bec7d4e621d52f884a0290dd8f67ec4e1b913822f0927c406ccc1f0b3d3bf", 0x47}], 0x1, &(0x7f0000000480)}], 0x1, 0x0)
r4 = epoll_create1(0x0)
fcntl$lock(r4, 0x26, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7fffffff})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004100), 0x2a37, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c)
listen(r5, 0x3)
clock_gettime(0x0, &(0x7f0000000400)={<r6=>0x0, <r7=>0x0})
write$evdev(r3, &(0x7f0000000440)=[{{r6, r7/1000+10000}, 0x15, 0x8}], 0x10)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r8, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)

01:21:37 executing program 0:
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = userfaultfd(0x80000)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0xe})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000913000)={{&(0x7f00004b3000/0x5000)=nil, 0x5000}, 0x1})
clone(0x0, 0x0, 0x0, 0x0, 0x0)
sigaltstack(&(0x7f00004b5000/0x3000)=nil, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bond0\x00'})
read(r2, &(0x7f0000910000)=""/100, 0x64)

01:21:37 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mountstats\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r1, &(0x7f00000017c0), 0x183, 0x400000000000)

01:21:37 executing program 4:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000003c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x0, 0x6}}, 0x30)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000002c0)={0xfffffffffffffffd, 0x0, 0xffff, 0x7e43, 0x0, 0x2, 0x0, 0x0, 0x2})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0)
r1 = gettid()
get_robust_list(r1, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f0000000580)={&(0x7f0000000540)}, 0x0, &(0x7f00000005c0)}, &(0x7f0000000680)=0x18)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = syz_open_dev$amidi(&(0x7f00000004c0)='/dev/amidi#\x00', 0x3, 0x418101)
sendfile(r0, r2, &(0x7f0000000500), 0x6)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0)
tkill(r1, 0x1000000000016)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000300), 0xc)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x50)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f0000000000), 0x4)
connect$llc(r3, &(0x7f0000000080)={0x1a, 0x304, 0x7, 0x4, 0x2, 0x82, @local}, 0x10)

[  615.732177] IPVS: ftp: loaded support on port[0] = 21
01:21:37 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mountstats\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r1, &(0x7f00000017c0), 0x183, 0x400000000000)

01:21:37 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000001c0)={0x1, 0x0, 0x0})
write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}, 0x1, 0x400000000000038, 0x2}], 0xfe72)

01:21:37 executing program 4:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000003c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x0, 0x6}}, 0x30)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000002c0)={0xfffffffffffffffd, 0x0, 0xffff, 0x7e43, 0x0, 0x2, 0x0, 0x0, 0x2})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0)
r1 = gettid()
get_robust_list(r1, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f0000000580)={&(0x7f0000000540)}, 0x0, &(0x7f00000005c0)}, &(0x7f0000000680)=0x18)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = syz_open_dev$amidi(&(0x7f00000004c0)='/dev/amidi#\x00', 0x3, 0x418101)
sendfile(r0, r2, &(0x7f0000000500), 0x6)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0)
tkill(r1, 0x1000000000016)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000300), 0xc)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x50)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f0000000000), 0x4)
connect$llc(r3, &(0x7f0000000080)={0x1a, 0x304, 0x7, 0x4, 0x2, 0x82, @local}, 0x10)

01:21:38 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x0, 0x0, 0x0, @sint={0x0, 0x10001}}]})
r2 = userfaultfd(0x0)
mmap$binder(&(0x7f000077e000/0x2000)=nil, 0x2000, 0x6, 0x10, 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
getpid()
ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000180))
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000140)={0x80000001})
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=<r3=>0x0)
sched_rr_get_interval(r3, &(0x7f0000000280))
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
r4 = gettid()
process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x2f4}], 0x100000000000013c, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034b389}], 0x1, 0x0)
close(r2)

01:21:38 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mountstats\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r1, &(0x7f00000017c0), 0x183, 0x400000000000)

01:21:38 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000001c0)={0x1, 0x0, 0x0})
write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}, 0x1, 0x400000000000038, 0x2}], 0xfe72)

01:21:38 executing program 0:
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = userfaultfd(0x80000)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0xe})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000913000)={{&(0x7f00004b3000/0x5000)=nil, 0x5000}, 0x1})
clone(0x0, 0x0, 0x0, 0x0, 0x0)
sigaltstack(&(0x7f00004b5000/0x3000)=nil, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bond0\x00'})
read(r2, &(0x7f0000910000)=""/100, 0x64)

01:21:38 executing program 4:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000003c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x0, 0x6}}, 0x30)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000002c0)={0xfffffffffffffffd, 0x0, 0xffff, 0x7e43, 0x0, 0x2, 0x0, 0x0, 0x2})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0)
r1 = gettid()
get_robust_list(r1, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f0000000580)={&(0x7f0000000540)}, 0x0, &(0x7f00000005c0)}, &(0x7f0000000680)=0x18)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = syz_open_dev$amidi(&(0x7f00000004c0)='/dev/amidi#\x00', 0x3, 0x418101)
sendfile(r0, r2, &(0x7f0000000500), 0x6)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0)
tkill(r1, 0x1000000000016)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000300), 0xc)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x50)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f0000000000), 0x4)
connect$llc(r3, &(0x7f0000000080)={0x1a, 0x304, 0x7, 0x4, 0x2, 0x82, @local}, 0x10)

[  616.442970] IPVS: ftp: loaded support on port[0] = 21
01:21:38 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='memory.low\x00', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='pids.current\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000300)=ANY=[@ANYBLOB="5075806fda21e25d243618854506b606e1ccea6bbc3019c8e37a5074c44bcf35a6e1a4f007f6cfa37119033310bf27fc106e040c051643446ccad5c6a6b196e8cf1b4031006a1a40992a09a8c1c3357266f8902b41c42a00b8e900758ad3eedc22f15b42f5a6f91f072c36623581ccc904711b91be5abbd1a22ac179990b3b09562be21565ad5dbd0b5b0bc59109ff3e662a7e7cbe55e2f192977956eab841cd5374796743d4e874cc8e9b6ce507041354c32bd4ca7a3dc3d1f15c5c6ea15ce68874df68cf787e60577f0000000000"])
unshare(0x40000000)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001300))
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000001c0)="d4e30562576b33ac23485e14cdcab975eb8ea52eee5199ee34cf72624cee0ce0083b55655f64924a5bec7d4e621d52f884a0290dd8f67ec4e1b913822f0927c406ccc1f0b3d3bf", 0x47}], 0x1, &(0x7f0000000480)}], 0x1, 0x0)
r4 = epoll_create1(0x0)
fcntl$lock(r4, 0x26, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7fffffff})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004100), 0x2a37, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c)
listen(r5, 0x3)
clock_gettime(0x0, &(0x7f0000000400)={<r6=>0x0, <r7=>0x0})
write$evdev(r3, &(0x7f0000000440)=[{{r6, r7/1000+10000}, 0x15, 0x8}], 0x10)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r8, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)

01:21:38 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mountstats\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r1, &(0x7f00000017c0), 0x183, 0x400000000000)

01:21:38 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000001c0)={0x1, 0x0, 0x0})
write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}, 0x1, 0x400000000000038, 0x2}], 0xfe72)

01:21:38 executing program 4:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000003c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x0, 0x6}}, 0x30)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000002c0)={0xfffffffffffffffd, 0x0, 0xffff, 0x7e43, 0x0, 0x2, 0x0, 0x0, 0x2})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0)
r1 = gettid()
get_robust_list(r1, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f0000000580)={&(0x7f0000000540)}, 0x0, &(0x7f00000005c0)}, &(0x7f0000000680)=0x18)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = syz_open_dev$amidi(&(0x7f00000004c0)='/dev/amidi#\x00', 0x3, 0x418101)
sendfile(r0, r2, &(0x7f0000000500), 0x6)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0)
tkill(r1, 0x1000000000016)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000300), 0xc)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x50)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f0000000000), 0x4)
connect$llc(r3, &(0x7f0000000080)={0x1a, 0x304, 0x7, 0x4, 0x2, 0x82, @local}, 0x10)

01:21:38 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000003c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x0, 0x6}}, 0x30)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000002c0)={0xfffffffffffffffd, 0x0, 0xffff, 0x7e43, 0x0, 0x2, 0x0, 0x0, 0x2})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0)
r1 = gettid()
get_robust_list(r1, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f0000000580)={&(0x7f0000000540)}, 0x0, &(0x7f00000005c0)}, &(0x7f0000000680)=0x18)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = syz_open_dev$amidi(&(0x7f00000004c0)='/dev/amidi#\x00', 0x3, 0x418101)
sendfile(r0, r2, &(0x7f0000000500), 0x6)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0)
tkill(r1, 0x1000000000016)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000300), 0xc)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x50)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f0000000000), 0x4)
connect$llc(r3, &(0x7f0000000080)={0x1a, 0x304, 0x7, 0x4, 0x2, 0x82, @local}, 0x10)

01:21:38 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x0, 0x0, 0x0, @sint={0x0, 0x10001}}]})
r2 = userfaultfd(0x0)
mmap$binder(&(0x7f000077e000/0x2000)=nil, 0x2000, 0x6, 0x10, 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
getpid()
ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000180))
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000140)={0x80000001})
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=<r3=>0x0)
sched_rr_get_interval(r3, &(0x7f0000000280))
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
r4 = gettid()
process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x2f4}], 0x100000000000013c, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034b389}], 0x1, 0x0)
close(r2)

01:21:38 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
r1 = socket(0x1e, 0x805, 0x0)
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
socket(0x1e, 0x805, 0x0)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000180)}, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
socket$inet6(0xa, 0x6, 0x0)
flistxattr(0xffffffffffffffff, &(0x7f00000001c0)=""/166, 0xa6)
connect(0xffffffffffffffff, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040), 0x8)

[  617.083847] IPVS: ftp: loaded support on port[0] = 21
01:21:39 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
geteuid()
stat(0x0, 0x0)
write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0)
clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)

01:21:39 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000003c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x0, 0x6}}, 0x30)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000002c0)={0xfffffffffffffffd, 0x0, 0xffff, 0x7e43, 0x0, 0x2, 0x0, 0x0, 0x2})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0)
r1 = gettid()
get_robust_list(r1, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f0000000580)={&(0x7f0000000540)}, 0x0, &(0x7f00000005c0)}, &(0x7f0000000680)=0x18)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = syz_open_dev$amidi(&(0x7f00000004c0)='/dev/amidi#\x00', 0x3, 0x418101)
sendfile(r0, r2, &(0x7f0000000500), 0x6)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0)
tkill(r1, 0x1000000000016)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000300), 0xc)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x50)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f0000000000), 0x4)
connect$llc(r3, &(0x7f0000000080)={0x1a, 0x304, 0x7, 0x4, 0x2, 0x82, @local}, 0x10)

01:21:39 executing program 0:
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = userfaultfd(0x80000)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0xe})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000913000)={{&(0x7f00004b3000/0x5000)=nil, 0x5000}, 0x1})
clone(0x0, 0x0, 0x0, 0x0, 0x0)
sigaltstack(&(0x7f00004b5000/0x3000)=nil, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bond0\x00'})
read(r2, &(0x7f0000910000)=""/100, 0x64)

01:21:39 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @remote, 0x8dd}}}, 0x84)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5)
connect$inet6(r0, &(0x7f0000000140), 0x1c)
ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000300)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r0, r1, &(0x7f0000000000), 0x10000)

01:21:39 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
r1 = socket(0x1e, 0x805, 0x0)
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
socket(0x1e, 0x805, 0x0)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000180)}, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
socket$inet6(0xa, 0x6, 0x0)
flistxattr(0xffffffffffffffff, &(0x7f00000001c0)=""/166, 0xa6)
connect(0xffffffffffffffff, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040), 0x8)

01:21:39 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='memory.low\x00', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='pids.current\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000300)=ANY=[@ANYBLOB="5075806fda21e25d243618854506b606e1ccea6bbc3019c8e37a5074c44bcf35a6e1a4f007f6cfa37119033310bf27fc106e040c051643446ccad5c6a6b196e8cf1b4031006a1a40992a09a8c1c3357266f8902b41c42a00b8e900758ad3eedc22f15b42f5a6f91f072c36623581ccc904711b91be5abbd1a22ac179990b3b09562be21565ad5dbd0b5b0bc59109ff3e662a7e7cbe55e2f192977956eab841cd5374796743d4e874cc8e9b6ce507041354c32bd4ca7a3dc3d1f15c5c6ea15ce68874df68cf787e60577f0000000000"])
unshare(0x40000000)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001300))
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000001c0)="d4e30562576b33ac23485e14cdcab975eb8ea52eee5199ee34cf72624cee0ce0083b55655f64924a5bec7d4e621d52f884a0290dd8f67ec4e1b913822f0927c406ccc1f0b3d3bf", 0x47}], 0x1, &(0x7f0000000480)}], 0x1, 0x0)
r4 = epoll_create1(0x0)
fcntl$lock(r4, 0x26, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7fffffff})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004100), 0x2a37, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c)
listen(r5, 0x3)
clock_gettime(0x0, &(0x7f0000000400)={<r6=>0x0, <r7=>0x0})
write$evdev(r3, &(0x7f0000000440)=[{{r6, r7/1000+10000}, 0x15, 0x8}], 0x10)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r8, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)

01:21:39 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000003c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x0, 0x6}}, 0x30)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000002c0)={0xfffffffffffffffd, 0x0, 0xffff, 0x7e43, 0x0, 0x2, 0x0, 0x0, 0x2})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0)
r1 = gettid()
get_robust_list(r1, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f0000000580)={&(0x7f0000000540)}, 0x0, &(0x7f00000005c0)}, &(0x7f0000000680)=0x18)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = syz_open_dev$amidi(&(0x7f00000004c0)='/dev/amidi#\x00', 0x3, 0x418101)
sendfile(r0, r2, &(0x7f0000000500), 0x6)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0)
tkill(r1, 0x1000000000016)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000300), 0xc)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x50)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f0000000000), 0x4)
connect$llc(r3, &(0x7f0000000080)={0x1a, 0x304, 0x7, 0x4, 0x2, 0x82, @local}, 0x10)

01:21:39 executing program 0:
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = userfaultfd(0x80000)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0xe})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000913000)={{&(0x7f00004b3000/0x5000)=nil, 0x5000}, 0x1})
clone(0x0, 0x0, 0x0, 0x0, 0x0)
sigaltstack(&(0x7f00004b5000/0x3000)=nil, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bond0\x00'})
read(r2, &(0x7f0000910000)=""/100, 0x64)

01:21:39 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
r1 = socket(0x1e, 0x805, 0x0)
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
socket(0x1e, 0x805, 0x0)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000180)}, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
socket$inet6(0xa, 0x6, 0x0)
flistxattr(0xffffffffffffffff, &(0x7f00000001c0)=""/166, 0xa6)
connect(0xffffffffffffffff, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040), 0x8)

01:21:39 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @remote, 0x8dd}}}, 0x84)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5)
connect$inet6(r0, &(0x7f0000000140), 0x1c)
ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000300)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r0, r1, &(0x7f0000000000), 0x10000)

01:21:39 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x0, 0x0, 0x0, @sint={0x0, 0x10001}}]})
r2 = userfaultfd(0x0)
mmap$binder(&(0x7f000077e000/0x2000)=nil, 0x2000, 0x6, 0x10, 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
getpid()
ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000180))
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000140)={0x80000001})
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=<r3=>0x0)
sched_rr_get_interval(r3, &(0x7f0000000280))
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
r4 = gettid()
process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x2f4}], 0x100000000000013c, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034b389}], 0x1, 0x0)
close(r2)

01:21:39 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @remote, 0x8dd}}}, 0x84)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5)
connect$inet6(r0, &(0x7f0000000140), 0x1c)
ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000300)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r0, r1, &(0x7f0000000000), 0x10000)

01:21:40 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
r1 = socket(0x1e, 0x805, 0x0)
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
socket(0x1e, 0x805, 0x0)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000180)}, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
socket$inet6(0xa, 0x6, 0x0)
flistxattr(0xffffffffffffffff, &(0x7f00000001c0)=""/166, 0xa6)
connect(0xffffffffffffffff, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040), 0x8)

[  618.204750] IPVS: ftp: loaded support on port[0] = 21
01:21:40 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @remote, 0x8dd}}}, 0x84)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5)
connect$inet6(r0, &(0x7f0000000140), 0x1c)
ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000300)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r0, r1, &(0x7f0000000000), 0x10000)

01:21:40 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @remote, 0x8dd}}}, 0x84)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5)
connect$inet6(r0, &(0x7f0000000140), 0x1c)
ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000300)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r0, r1, &(0x7f0000000000), 0x10000)

01:21:40 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @remote, 0x8dd}}}, 0x84)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5)
connect$inet6(r0, &(0x7f0000000140), 0x1c)
ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000300)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r0, r1, &(0x7f0000000000), 0x10000)

01:21:40 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @remote, 0x8dd}}}, 0x84)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5)
connect$inet6(r0, &(0x7f0000000140), 0x1c)
ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000300)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r0, r1, &(0x7f0000000000), 0x10000)

01:21:40 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='memory.low\x00', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='pids.current\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000300)=ANY=[@ANYBLOB="5075806fda21e25d243618854506b606e1ccea6bbc3019c8e37a5074c44bcf35a6e1a4f007f6cfa37119033310bf27fc106e040c051643446ccad5c6a6b196e8cf1b4031006a1a40992a09a8c1c3357266f8902b41c42a00b8e900758ad3eedc22f15b42f5a6f91f072c36623581ccc904711b91be5abbd1a22ac179990b3b09562be21565ad5dbd0b5b0bc59109ff3e662a7e7cbe55e2f192977956eab841cd5374796743d4e874cc8e9b6ce507041354c32bd4ca7a3dc3d1f15c5c6ea15ce68874df68cf787e60577f0000000000"])
unshare(0x40000000)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001300))
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000001c0)="d4e30562576b33ac23485e14cdcab975eb8ea52eee5199ee34cf72624cee0ce0083b55655f64924a5bec7d4e621d52f884a0290dd8f67ec4e1b913822f0927c406ccc1f0b3d3bf", 0x47}], 0x1, &(0x7f0000000480)}], 0x1, 0x0)
r4 = epoll_create1(0x0)
fcntl$lock(r4, 0x26, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7fffffff})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004100), 0x2a37, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c)
listen(r5, 0x3)
clock_gettime(0x0, &(0x7f0000000400)={<r6=>0x0, <r7=>0x0})
write$evdev(r3, &(0x7f0000000440)=[{{r6, r7/1000+10000}, 0x15, 0x8}], 0x10)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r8, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)

01:21:40 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @remote, 0x8dd}}}, 0x84)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5)
connect$inet6(r0, &(0x7f0000000140), 0x1c)
ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000300)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r0, r1, &(0x7f0000000000), 0x10000)

01:21:40 executing program 0:
pipe(&(0x7f0000bbc000))
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000300))
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
unlink(0x0)
fchdir(r1)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000700080000ee8b08b7960ff7aa6e041a7700fdff863809000463b8f20252b1d85cbf000000000038f70f653f0ffb09f0d536c864df5e0a9efd50fe203534da91b5b9fb501e1ac4bfa3841f9d63e232b9b2500fb1d96033ccfdff066428eb4c6d8a458a8c77485be466b4345d7c709733872d8e82a8f46cfe62659c"], 0x83)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000040)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
getpid()
getpgrp(0xffffffffffffffff)
ioctl$sock_SIOCDELDLCI(r1, 0x8981, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
write$P9_RSTAT(r1, &(0x7f0000001040)=ANY=[@ANYBLOB="4a0000007d020000004300ff030900000008306a0000030000000000000000000020450f000068000000018000000000000001002105007666617400050076666174000500ad65d7b322"], 0x4a)
lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00))
mkdir(&(0x7f0000000580)='./bus\x00', 0x0)
readlinkat(r1, 0x0, &(0x7f0000000480)=""/122, 0x7a)

01:21:40 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @remote, 0x8dd}}}, 0x84)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5)
connect$inet6(r0, &(0x7f0000000140), 0x1c)
ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000300)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r0, r1, &(0x7f0000000000), 0x10000)

01:21:40 executing program 4:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x3, 0x0)
connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x10)
write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000780)={0x78, 0xfffffffffffffffe, 0x5, {0x0, 0x3ff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x0, 0x0, 0x0, 0x8}}}, 0x78)
listen(r0, 0x7f)
gettid()
fstat(0xffffffffffffffff, 0x0)
getgid()
getpgrp(0x0)
getgid()
getpgrp(0x0)
getpgid(0xffffffffffffffff)
accept(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)

01:21:40 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$search(0xa, r0, &(0x7f0000000a40)='keyring\x00', &(0x7f0000000a80)={'syz', 0x1}, 0x0)

01:21:41 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$search(0xa, r0, &(0x7f0000000a40)='keyring\x00', &(0x7f0000000a80)={'syz', 0x1}, 0x0)

01:21:41 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000200)={0x7f, 0x0, [0xc0000101, 0x0, 0x4b564d02], [0xc2]})

[  619.290849] IPVS: ftp: loaded support on port[0] = 21
01:21:41 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @remote, 0x8dd}}}, 0x84)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5)
connect$inet6(r0, &(0x7f0000000140), 0x1c)
ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000300)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r0, r1, &(0x7f0000000000), 0x10000)

01:21:41 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$search(0xa, r0, &(0x7f0000000a40)='keyring\x00', &(0x7f0000000a80)={'syz', 0x1}, 0x0)

[  619.428929] kvm [25381]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
01:21:41 executing program 4:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x3, 0x0)
connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x10)
write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000780)={0x78, 0xfffffffffffffffe, 0x5, {0x0, 0x3ff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x0, 0x0, 0x0, 0x8}}}, 0x78)
listen(r0, 0x7f)
gettid()
fstat(0xffffffffffffffff, 0x0)
getgid()
getpgrp(0x0)
getgid()
getpgrp(0x0)
getpgid(0xffffffffffffffff)
accept(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)

01:21:41 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$search(0xa, r0, &(0x7f0000000a40)='keyring\x00', &(0x7f0000000a80)={'syz', 0x1}, 0x0)

01:21:41 executing program 0:
pipe(&(0x7f0000bbc000))
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000300))
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
unlink(0x0)
fchdir(r1)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000700080000ee8b08b7960ff7aa6e041a7700fdff863809000463b8f20252b1d85cbf000000000038f70f653f0ffb09f0d536c864df5e0a9efd50fe203534da91b5b9fb501e1ac4bfa3841f9d63e232b9b2500fb1d96033ccfdff066428eb4c6d8a458a8c77485be466b4345d7c709733872d8e82a8f46cfe62659c"], 0x83)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000040)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
getpid()
getpgrp(0xffffffffffffffff)
ioctl$sock_SIOCDELDLCI(r1, 0x8981, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
write$P9_RSTAT(r1, &(0x7f0000001040)=ANY=[@ANYBLOB="4a0000007d020000004300ff030900000008306a0000030000000000000000000020450f000068000000018000000000000001002105007666617400050076666174000500ad65d7b322"], 0x4a)
lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00))
mkdir(&(0x7f0000000580)='./bus\x00', 0x0)
readlinkat(r1, 0x0, &(0x7f0000000480)=""/122, 0x7a)

01:21:41 executing program 3:
msgrcv(0x0, &(0x7f0000000180)={0x0, ""/79}, 0xfe3c, 0x0, 0xa4a3ad41a879dde0)

01:21:41 executing program 2:
openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000640)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000))

01:21:41 executing program 5:
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write(r0, &(0x7f0000000e00)="2400000021002551075c0165ff0ffc020202230000100f0007e1000c0800020016000000bc0000008f3943793a5ea67658cb22d90000000000000059b97dc8f8b550e66a2bbf77c4931da84157f7a733686a22fd8169f6b6b4f464e0c05df670d851f785ea2b85d32b3583d87124da3bb0b9e2cc000000dcce1fb4ac2cbd48c8378a3ad82a5b83c01295723da595c4831f65123819e204853d48a5a6bd525801d5cae983cf4544a9c4c390f36e85787a8efc32e0015c85ead2b748bc6a5fefc4e53543f9f65e3d961a110af1acc08ce510c7a70723741b34981d1b182deb7904", 0xe0)

01:21:41 executing program 4:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x3, 0x0)
connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x10)
write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000780)={0x78, 0xfffffffffffffffe, 0x5, {0x0, 0x3ff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x0, 0x0, 0x0, 0x8}}}, 0x78)
listen(r0, 0x7f)
gettid()
fstat(0xffffffffffffffff, 0x0)
getgid()
getpgrp(0x0)
getgid()
getpgrp(0x0)
getpgid(0xffffffffffffffff)
accept(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)

01:21:41 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0x66)
read(r0, &(0x7f0000000100)=""/11, 0xffffff31)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x0)

01:21:42 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000002b00812de45ae087185082cf0124b0eba06ec4000400000000000017000040030000000051894dd65b2f", 0x2e}], 0x1}, 0x0)

01:21:42 executing program 1:
socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
quotactl(0x80000101, 0x0, 0x0, 0x0)

01:21:42 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x4a}, 0x2c)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0, 0x0, [0x3f00000000000000]}, 0x2c)

01:21:42 executing program 4:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x3, 0x0)
connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x10)
write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000780)={0x78, 0xfffffffffffffffe, 0x5, {0x0, 0x3ff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x0, 0x0, 0x0, 0x8}}}, 0x78)
listen(r0, 0x7f)
gettid()
fstat(0xffffffffffffffff, 0x0)
getgid()
getpgrp(0x0)
getgid()
getpgrp(0x0)
getpgid(0xffffffffffffffff)
accept(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)

01:21:42 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

01:21:42 executing program 1:
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10)
recvmmsg(r0, &(0x7f00000077c0)=[{{&(0x7f0000005a80)=@isdn, 0x80, &(0x7f0000002c00)=[{&(0x7f0000005b00)=""/92, 0x5c}, {&(0x7f0000005b80)=""/197, 0xc5}], 0x2}, 0x1}, {{&(0x7f0000005c80)=@xdp, 0xffffffae, &(0x7f0000005f00)=[{&(0x7f0000005d00)=""/97, 0x61}, {&(0x7f0000005d80)=""/171, 0xab}, {&(0x7f0000005e40)=""/128, 0x80}, {&(0x7f0000005ec0)}], 0x4, &(0x7f0000005f40)=""/183, 0xb7}, 0x1}, {{&(0x7f0000000340)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x6d, &(0x7f0000006500)=[{&(0x7f0000006080)=""/99, 0x63}, {&(0x7f0000006100)=""/254, 0xfe}, {&(0x7f0000006200)=""/136, 0x88}, {&(0x7f00000062c0)=""/115, 0x73}, {&(0x7f0000006340)=""/117, 0x75}, {&(0x7f00000063c0)=""/63, 0x3f}, {&(0x7f0000006400)=""/106, 0xff64}, {&(0x7f0000006480)=""/128, 0x80}], 0x8, &(0x7f0000006580)=""/4096, 0x1000}, 0x200}, {{&(0x7f0000007580)=@x25={0x9, @remote}, 0x80, &(0x7f0000007780)=[{&(0x7f0000007600)=""/144, 0x90}, {&(0x7f00000076c0)=""/135, 0x87}], 0x2}, 0x1}], 0x4, 0x103, &(0x7f00000078c0))

01:21:42 executing program 0:
pipe(&(0x7f0000bbc000))
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000300))
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
unlink(0x0)
fchdir(r1)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000700080000ee8b08b7960ff7aa6e041a7700fdff863809000463b8f20252b1d85cbf000000000038f70f653f0ffb09f0d536c864df5e0a9efd50fe203534da91b5b9fb501e1ac4bfa3841f9d63e232b9b2500fb1d96033ccfdff066428eb4c6d8a458a8c77485be466b4345d7c709733872d8e82a8f46cfe62659c"], 0x83)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000040)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
getpid()
getpgrp(0xffffffffffffffff)
ioctl$sock_SIOCDELDLCI(r1, 0x8981, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
write$P9_RSTAT(r1, &(0x7f0000001040)=ANY=[@ANYBLOB="4a0000007d020000004300ff030900000008306a0000030000000000000000000020450f000068000000018000000000000001002105007666617400050076666174000500ad65d7b322"], 0x4a)
lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00))
mkdir(&(0x7f0000000580)='./bus\x00', 0x0)
readlinkat(r1, 0x0, &(0x7f0000000480)=""/122, 0x7a)

01:21:42 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0x66)
read(r0, &(0x7f0000000100)=""/11, 0xffffff31)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x0)

01:21:42 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x4a}, 0x2c)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0, 0x0, [0x3f00000000000000]}, 0x2c)

01:21:42 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0x66)
read(r0, &(0x7f0000000100)=""/11, 0xffffff31)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x0)

01:21:42 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@ipv4={[], [], @multicast2}, 0x0, 0x3c}}}, 0xe8)
setsockopt$sock_void(r1, 0x29, 0x22, 0x0, 0x0)

01:21:42 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

01:21:43 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x4a}, 0x2c)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0, 0x0, [0x3f00000000000000]}, 0x2c)

01:21:43 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0x66)
read(r0, &(0x7f0000000100)=""/11, 0xffffff31)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x0)

01:21:43 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

01:21:43 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0x66)
read(r0, &(0x7f0000000100)=""/11, 0xffffff31)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x0)

01:21:43 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x4a}, 0x2c)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0, 0x0, [0x3f00000000000000]}, 0x2c)

01:21:43 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0x66)
read(r0, &(0x7f0000000100)=""/11, 0xffffff31)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x0)

01:21:43 executing program 0:
pipe(&(0x7f0000bbc000))
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000300))
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
unlink(0x0)
fchdir(r1)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000700080000ee8b08b7960ff7aa6e041a7700fdff863809000463b8f20252b1d85cbf000000000038f70f653f0ffb09f0d536c864df5e0a9efd50fe203534da91b5b9fb501e1ac4bfa3841f9d63e232b9b2500fb1d96033ccfdff066428eb4c6d8a458a8c77485be466b4345d7c709733872d8e82a8f46cfe62659c"], 0x83)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000040)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
getpid()
getpgrp(0xffffffffffffffff)
ioctl$sock_SIOCDELDLCI(r1, 0x8981, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
write$P9_RSTAT(r1, &(0x7f0000001040)=ANY=[@ANYBLOB="4a0000007d020000004300ff030900000008306a0000030000000000000000000020450f000068000000018000000000000001002105007666617400050076666174000500ad65d7b322"], 0x4a)
lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00))
mkdir(&(0x7f0000000580)='./bus\x00', 0x0)
readlinkat(r1, 0x0, &(0x7f0000000480)=""/122, 0x7a)

01:21:43 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

01:21:43 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

01:21:43 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xa, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}]}, 0x0}, 0x48)

01:21:43 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x4000, &(0x7f0000000480)='TRUE')

01:21:44 executing program 2:
r0 = socket$isdn_base(0x22, 0x3, 0x0)
bind$isdn_base(r0, &(0x7f0000000000), 0x6)

01:21:44 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x4000, &(0x7f0000000480)='TRUE')

01:21:44 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0x66)
read(r0, &(0x7f0000000100)=""/11, 0xffffff31)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x0)

01:21:44 executing program 2:
recvmmsg(0xffffffffffffffff, &(0x7f000000c080)=[{{0x0, 0x0, &(0x7f0000007e80)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000007d80)=""/230, 0xe6}], 0x6}}], 0x1, 0x0, 0x0)
r0 = socket$kcm(0x29, 0x5, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmmsg(r0, &(0x7f0000007e00), 0x115, 0x0)

01:21:44 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x4000, &(0x7f0000000480)='TRUE')

01:21:44 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x11)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffff54b})
setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f0000000040)=r0, 0x4)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e88, 0x0, @mcast2={0xff, 0x2, [0xe82b, 0x0, 0xf5ffffff00000000, 0x2b02ff]}, 0xd}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0)

01:21:44 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

01:21:45 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x11)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffff54b})
setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f0000000040)=r0, 0x4)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e88, 0x0, @mcast2={0xff, 0x2, [0xe82b, 0x0, 0xf5ffffff00000000, 0x2b02ff]}, 0xd}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0)

01:21:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x4000, &(0x7f0000000480)='TRUE')

01:21:45 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000040))

01:21:45 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

01:21:45 executing program 0:
syz_open_procfs(0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040))
fcntl$notify(r0, 0x402, 0xffffffffffffdffd)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = gettid()
fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1})
r2 = socket(0x10, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='schedstat\x00')
sendfile(r2, r3, 0x0, 0x80000002)

01:21:45 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x3080, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x4)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)

01:21:45 executing program 3:
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x1, 0x0)
r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c)
listen(r0, 0x2)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98)
r2 = socket$netlink(0x10, 0x3, 0xc)
getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180), &(0x7f00000001c0)=0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)

01:21:45 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x11)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffff54b})
setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f0000000040)=r0, 0x4)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e88, 0x0, @mcast2={0xff, 0x2, [0xe82b, 0x0, 0xf5ffffff00000000, 0x2b02ff]}, 0xd}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0)

01:21:45 executing program 0:
syz_open_procfs(0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040))
fcntl$notify(r0, 0x402, 0xffffffffffffdffd)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = gettid()
fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1})
r2 = socket(0x10, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='schedstat\x00')
sendfile(r2, r3, 0x0, 0x80000002)

01:21:45 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)

01:21:45 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x11)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffff54b})
setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f0000000040)=r0, 0x4)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e88, 0x0, @mcast2={0xff, 0x2, [0xe82b, 0x0, 0xf5ffffff00000000, 0x2b02ff]}, 0xd}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0)

01:21:45 executing program 0:
syz_open_procfs(0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040))
fcntl$notify(r0, 0x402, 0xffffffffffffdffd)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = gettid()
fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1})
r2 = socket(0x10, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='schedstat\x00')
sendfile(r2, r3, 0x0, 0x80000002)

01:21:45 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x127e, 0x709000)

01:21:46 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2)
r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x0)
ftruncate(r1, 0x1000000)
sendfile(r0, r1, 0x0, 0xffff)
close(r0)

01:21:46 executing program 0:
syz_open_procfs(0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040))
fcntl$notify(r0, 0x402, 0xffffffffffffdffd)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = gettid()
fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1})
r2 = socket(0x10, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='schedstat\x00')
sendfile(r2, r3, 0x0, 0x80000002)

01:21:46 executing program 4:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r2 = syz_open_dev$dmmidi(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x803, 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x0, 0x4)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="66b9ad0300000f320f01c8d926bd580f0054080f21ffba200066ed0f01cf0f30d9fe8e03", 0x24}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$sock_inet_SIOCRTMSG(r2, 0x80085504, 0x0)
r6 = fcntl$dupfd(r1, 0x0, r0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
ioctl$sock_x25_SIOCDELRT(r6, 0x89e7, 0x0)

01:21:46 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x3, 0x402)
write$binfmt_elf32(r0, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000002, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, [{}]}, 0x58)

01:21:46 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2)
r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x0)
ftruncate(r1, 0x1000000)
sendfile(r0, r1, 0x0, 0xffff)
close(r0)

01:21:46 executing program 3:
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x1, 0x0)
r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c)
listen(r0, 0x2)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98)
r2 = socket$netlink(0x10, 0x3, 0xc)
getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180), &(0x7f00000001c0)=0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)

01:21:46 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0xe01f0300, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="009000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200422020002d010000d306000055aa", 0x60, 0x1a0}])
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000340)={'broute\x00'}, &(0x7f00000003c0)=0x78)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, 0x0)
stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = request_key(&(0x7f0000000580)='pkcs7_test\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)='GPL\x00', 0xfffffffffffffffb)
keyctl$get_persistent(0x16, r2, r3)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000640)=@buf)
accept4(0xffffffffffffff9c, &(0x7f0000000140)=@hci, &(0x7f00000000c0)=0x80, 0x0)
r4 = getgid()
getresgid(&(0x7f0000000100), &(0x7f00000001c0)=<r5=>0x0, &(0x7f00000002c0))
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x2, 0x4, 0x76, 0xf, 0x5, 0x0, 0x70bd29, 0x25dfdbff, [@sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}]}, 0x28}}, 0x0)
r6 = getgid()
setgroups(0x3, &(0x7f0000000300)=[r4, r5, r6])

01:21:46 executing program 1:
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x40, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e0b374057c442c1182f6275730ac6f90034693e1ab0cfc4a6707b7e093ee8faca2ddb0a63ba4059676e67d2645a02f1194fa585c78df2954e2c5cbab0c45b9263315dfe2c3f62a9c996077c2703728c44b9420220f87dd032005bc10915200ff5ed972027301a92a740454f362a9eb0fc3a210116c4185032cfc6868b760200000034875d63266612716600e776a8131a4a1ab478e333b8623462b84c56fbbeaab0db0100010000000000e72a11d7dfa8d232bc65f0f876d539b50a57"], 0xc0)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

01:21:47 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)

01:21:47 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2)
r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x0)
ftruncate(r1, 0x1000000)
sendfile(r0, r1, 0x0, 0xffff)
close(r0)

01:21:47 executing program 1:
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x40, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e0b374057c442c1182f6275730ac6f90034693e1ab0cfc4a6707b7e093ee8faca2ddb0a63ba4059676e67d2645a02f1194fa585c78df2954e2c5cbab0c45b9263315dfe2c3f62a9c996077c2703728c44b9420220f87dd032005bc10915200ff5ed972027301a92a740454f362a9eb0fc3a210116c4185032cfc6868b760200000034875d63266612716600e776a8131a4a1ab478e333b8623462b84c56fbbeaab0db0100010000000000e72a11d7dfa8d232bc65f0f876d539b50a57"], 0xc0)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

01:21:47 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="0f20c06635000000200f22c00f07ba400066b80200000066efbaf80c66b84809038766efbafc0c66ed660f38037f290f017e0066b92209000066b86ee7571066ba7662e61d0f3066b8040000000f23d00f21f866352000000c0f23f866b9650b000066b80000000066ba008000000f30f23e0f35", 0x74}], 0x1, 0x0, &(0x7f0000000040), 0x10000000000000e9)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
add_key(0x0, 0x0, &(0x7f0000000000)="738ff751189d70b015b8", 0xa, 0xfffffffffffffffe)

01:21:47 executing program 3:
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x1, 0x0)
r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c)
listen(r0, 0x2)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98)
r2 = socket$netlink(0x10, 0x3, 0xc)
getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180), &(0x7f00000001c0)=0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)

01:21:47 executing program 4:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r2 = syz_open_dev$dmmidi(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x803, 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x0, 0x4)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="66b9ad0300000f320f01c8d926bd580f0054080f21ffba200066ed0f01cf0f30d9fe8e03", 0x24}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$sock_inet_SIOCRTMSG(r2, 0x80085504, 0x0)
r6 = fcntl$dupfd(r1, 0x0, r0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
ioctl$sock_x25_SIOCDELRT(r6, 0x89e7, 0x0)

01:21:47 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2)
r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x0)
ftruncate(r1, 0x1000000)
sendfile(r0, r1, 0x0, 0xffff)
close(r0)

01:21:47 executing program 1:
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x40, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e0b374057c442c1182f6275730ac6f90034693e1ab0cfc4a6707b7e093ee8faca2ddb0a63ba4059676e67d2645a02f1194fa585c78df2954e2c5cbab0c45b9263315dfe2c3f62a9c996077c2703728c44b9420220f87dd032005bc10915200ff5ed972027301a92a740454f362a9eb0fc3a210116c4185032cfc6868b760200000034875d63266612716600e776a8131a4a1ab478e333b8623462b84c56fbbeaab0db0100010000000000e72a11d7dfa8d232bc65f0f876d539b50a57"], 0xc0)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

01:21:48 executing program 0:
r0 = syz_init_net_socket$ax25(0x3, 0x400000000002, 0x0)
ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'bpq0\x00'})

01:21:48 executing program 1:
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x40, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e0b374057c442c1182f6275730ac6f90034693e1ab0cfc4a6707b7e093ee8faca2ddb0a63ba4059676e67d2645a02f1194fa585c78df2954e2c5cbab0c45b9263315dfe2c3f62a9c996077c2703728c44b9420220f87dd032005bc10915200ff5ed972027301a92a740454f362a9eb0fc3a210116c4185032cfc6868b760200000034875d63266612716600e776a8131a4a1ab478e333b8623462b84c56fbbeaab0db0100010000000000e72a11d7dfa8d232bc65f0f876d539b50a57"], 0xc0)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

01:21:48 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00[9\xa4@\xe4c\xe0\xfe\xc3D\xb7\xacu\xc8h\bL\xf80K\xd3\xf4z\x1a\x03\t\xef\x1cy\xc7\xae\xeaT/5\xf6\xfb\xe7 \xa3g\xde\xf2\x18\x05G\x98\x80\xf5\xaf\x92\xb1|\xbc\x7f\xb2n\x8c\x11\x96]\xb9x-\xa0\x82\aY.\x9d?\xf7\xdec\xe1U;\r\xf6eR\xf9\x89\xf8*\xd7\x11\xaa@')
read$eventfd(r0, 0x0, 0x0)

01:21:48 executing program 0:
r0 = syz_init_net_socket$ax25(0x3, 0x400000000002, 0x0)
ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'bpq0\x00'})

01:21:49 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)

01:21:49 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0x29c)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000300)=0x32, 0x4)
connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r1, &(0x7f0000000080), 0x104, 0x3f00, 0x0, 0x1bb)

01:21:49 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7b, 0x600000000000000, [0x40000070], [0xc2]})

01:21:49 executing program 0:
r0 = syz_init_net_socket$ax25(0x3, 0x400000000002, 0x0)
ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'bpq0\x00'})

01:21:49 executing program 3:
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x1, 0x0)
r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c)
listen(r0, 0x2)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98)
r2 = socket$netlink(0x10, 0x3, 0xc)
getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180), &(0x7f00000001c0)=0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)

01:21:49 executing program 4:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r2 = syz_open_dev$dmmidi(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x803, 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x0, 0x4)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="66b9ad0300000f320f01c8d926bd580f0054080f21ffba200066ed0f01cf0f30d9fe8e03", 0x24}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$sock_inet_SIOCRTMSG(r2, 0x80085504, 0x0)
r6 = fcntl$dupfd(r1, 0x0, r0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
ioctl$sock_x25_SIOCDELRT(r6, 0x89e7, 0x0)

01:21:49 executing program 0:
r0 = syz_init_net_socket$ax25(0x3, 0x400000000002, 0x0)
ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'bpq0\x00'})

01:21:49 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rt_sigaction(0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)="f04683123a45dae9c4c243f710c4a1f05cf1642643abc422d93f647d00660f2f40bc2642fcc481fb2cd62666410ff4a50670d5ef", {}, 0x0, &(0x7f0000000140)="c482f941f9c481e5d1680fdfc5c4e1fd50e3c4412df233c483695eb8a9000000280f6e9b46560000c4a1e168909ba059a466841f3ed9ee"}, 0x8, &(0x7f00000001c0))
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
write(r1, &(0x7f0000000fc0), 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x10000, &(0x7f0000000740)={0x0, 0x1c9c380})
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x44, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0xe}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400})
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000200)=""/212, &(0x7f0000000300)=0xd4)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000d80), &(0x7f0000000dc0)=0x684)

01:21:49 executing program 0:
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RLERRORu(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000007ffff"], 0x7)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
write$P9_RSETATTR(r1, &(0x7f0000000140)={0x7}, 0x3ec)
mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}})

[  627.704550] 9pnet: p9_errstr2errno: server reported unknown error 
01:21:49 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write(r0, &(0x7f0000000280), 0xba6c1c86)
ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000240))

[  627.752016] 9pnet: p9_errstr2errno: server reported unknown error 
01:21:49 executing program 0:
r0 = socket$inet6(0xa, 0x6, 0x0)
io_setup(0x1f0, &(0x7f0000000000)=<r1=>0x0)
listen(r0, 0x0)
io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)="ab", 0x1}])

01:21:49 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rt_sigaction(0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)="f04683123a45dae9c4c243f710c4a1f05cf1642643abc422d93f647d00660f2f40bc2642fcc481fb2cd62666410ff4a50670d5ef", {}, 0x0, &(0x7f0000000140)="c482f941f9c481e5d1680fdfc5c4e1fd50e3c4412df233c483695eb8a9000000280f6e9b46560000c4a1e168909ba059a466841f3ed9ee"}, 0x8, &(0x7f00000001c0))
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
write(r1, &(0x7f0000000fc0), 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x10000, &(0x7f0000000740)={0x0, 0x1c9c380})
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x44, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0xe}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400})
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000200)=""/212, &(0x7f0000000300)=0xd4)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000d80), &(0x7f0000000dc0)=0x684)

01:21:50 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rt_sigaction(0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)="f04683123a45dae9c4c243f710c4a1f05cf1642643abc422d93f647d00660f2f40bc2642fcc481fb2cd62666410ff4a50670d5ef", {}, 0x0, &(0x7f0000000140)="c482f941f9c481e5d1680fdfc5c4e1fd50e3c4412df233c483695eb8a9000000280f6e9b46560000c4a1e168909ba059a466841f3ed9ee"}, 0x8, &(0x7f00000001c0))
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
write(r1, &(0x7f0000000fc0), 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x10000, &(0x7f0000000740)={0x0, 0x1c9c380})
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x44, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0xe}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400})
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000200)=""/212, &(0x7f0000000300)=0xd4)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000d80), &(0x7f0000000dc0)=0x684)

01:21:50 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)

01:21:50 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rt_sigaction(0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)="f04683123a45dae9c4c243f710c4a1f05cf1642643abc422d93f647d00660f2f40bc2642fcc481fb2cd62666410ff4a50670d5ef", {}, 0x0, &(0x7f0000000140)="c482f941f9c481e5d1680fdfc5c4e1fd50e3c4412df233c483695eb8a9000000280f6e9b46560000c4a1e168909ba059a466841f3ed9ee"}, 0x8, &(0x7f00000001c0))
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
write(r1, &(0x7f0000000fc0), 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x10000, &(0x7f0000000740)={0x0, 0x1c9c380})
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x44, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0xe}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400})
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000200)=""/212, &(0x7f0000000300)=0xd4)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000d80), &(0x7f0000000dc0)=0x684)

01:21:50 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rt_sigaction(0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)="f04683123a45dae9c4c243f710c4a1f05cf1642643abc422d93f647d00660f2f40bc2642fcc481fb2cd62666410ff4a50670d5ef", {}, 0x0, &(0x7f0000000140)="c482f941f9c481e5d1680fdfc5c4e1fd50e3c4412df233c483695eb8a9000000280f6e9b46560000c4a1e168909ba059a466841f3ed9ee"}, 0x8, &(0x7f00000001c0))
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
write(r1, &(0x7f0000000fc0), 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x10000, &(0x7f0000000740)={0x0, 0x1c9c380})
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x44, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0xe}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400})
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000200)=""/212, &(0x7f0000000300)=0xd4)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000d80), &(0x7f0000000dc0)=0x684)

01:21:50 executing program 4:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r2 = syz_open_dev$dmmidi(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x803, 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x0, 0x4)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="66b9ad0300000f320f01c8d926bd580f0054080f21ffba200066ed0f01cf0f30d9fe8e03", 0x24}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$sock_inet_SIOCRTMSG(r2, 0x80085504, 0x0)
r6 = fcntl$dupfd(r1, 0x0, r0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
ioctl$sock_x25_SIOCDELRT(r6, 0x89e7, 0x0)

01:21:50 executing program 1:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = gettid()
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
read(r2, &(0x7f0000000140)=""/43, 0x2b)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000040))
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
dup2(r0, r2)
tkill(r1, 0x1000000000015)

01:21:50 executing program 1:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = gettid()
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
read(r2, &(0x7f0000000140)=""/43, 0x2b)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000040))
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
dup2(r0, r2)
tkill(r1, 0x1000000000015)

01:21:50 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rt_sigaction(0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)="f04683123a45dae9c4c243f710c4a1f05cf1642643abc422d93f647d00660f2f40bc2642fcc481fb2cd62666410ff4a50670d5ef", {}, 0x0, &(0x7f0000000140)="c482f941f9c481e5d1680fdfc5c4e1fd50e3c4412df233c483695eb8a9000000280f6e9b46560000c4a1e168909ba059a466841f3ed9ee"}, 0x8, &(0x7f00000001c0))
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
write(r1, &(0x7f0000000fc0), 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x10000, &(0x7f0000000740)={0x0, 0x1c9c380})
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x44, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0xe}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400})
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000200)=""/212, &(0x7f0000000300)=0xd4)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000d80), &(0x7f0000000dc0)=0x684)

01:21:51 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rt_sigaction(0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)="f04683123a45dae9c4c243f710c4a1f05cf1642643abc422d93f647d00660f2f40bc2642fcc481fb2cd62666410ff4a50670d5ef", {}, 0x0, &(0x7f0000000140)="c482f941f9c481e5d1680fdfc5c4e1fd50e3c4412df233c483695eb8a9000000280f6e9b46560000c4a1e168909ba059a466841f3ed9ee"}, 0x8, &(0x7f00000001c0))
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
write(r1, &(0x7f0000000fc0), 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x10000, &(0x7f0000000740)={0x0, 0x1c9c380})
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x44, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0xe}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400})
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000200)=""/212, &(0x7f0000000300)=0xd4)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000d80), &(0x7f0000000dc0)=0x684)

01:21:51 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rt_sigaction(0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)="f04683123a45dae9c4c243f710c4a1f05cf1642643abc422d93f647d00660f2f40bc2642fcc481fb2cd62666410ff4a50670d5ef", {}, 0x0, &(0x7f0000000140)="c482f941f9c481e5d1680fdfc5c4e1fd50e3c4412df233c483695eb8a9000000280f6e9b46560000c4a1e168909ba059a466841f3ed9ee"}, 0x8, &(0x7f00000001c0))
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
write(r1, &(0x7f0000000fc0), 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x10000, &(0x7f0000000740)={0x0, 0x1c9c380})
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x44, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0xe}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400})
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000200)=""/212, &(0x7f0000000300)=0xd4)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000d80), &(0x7f0000000dc0)=0x684)

01:21:51 executing program 1:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = gettid()
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
read(r2, &(0x7f0000000140)=""/43, 0x2b)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000040))
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
dup2(r0, r2)
tkill(r1, 0x1000000000015)

01:21:51 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rt_sigaction(0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)="f04683123a45dae9c4c243f710c4a1f05cf1642643abc422d93f647d00660f2f40bc2642fcc481fb2cd62666410ff4a50670d5ef", {}, 0x0, &(0x7f0000000140)="c482f941f9c481e5d1680fdfc5c4e1fd50e3c4412df233c483695eb8a9000000280f6e9b46560000c4a1e168909ba059a466841f3ed9ee"}, 0x8, &(0x7f00000001c0))
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
write(r1, &(0x7f0000000fc0), 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x10000, &(0x7f0000000740)={0x0, 0x1c9c380})
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x44, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0xe}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400})
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000200)=""/212, &(0x7f0000000300)=0xd4)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000d80), &(0x7f0000000dc0)=0x684)

01:21:51 executing program 1:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = gettid()
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
read(r2, &(0x7f0000000140)=""/43, 0x2b)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000040))
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
dup2(r0, r2)
tkill(r1, 0x1000000000015)

01:21:51 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
write$uinput_user_dev(r0, &(0x7f00000011c0)={'syz1\x00'}, 0x45c)

01:21:52 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0)
read(r0, &(0x7f0000000900)=""/4096, 0x1000)
ftruncate(r2, 0x80080)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0)
sendfile(r1, r2, 0x0, 0x2008000fffffffd)

01:21:52 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rt_sigaction(0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)="f04683123a45dae9c4c243f710c4a1f05cf1642643abc422d93f647d00660f2f40bc2642fcc481fb2cd62666410ff4a50670d5ef", {}, 0x0, &(0x7f0000000140)="c482f941f9c481e5d1680fdfc5c4e1fd50e3c4412df233c483695eb8a9000000280f6e9b46560000c4a1e168909ba059a466841f3ed9ee"}, 0x8, &(0x7f00000001c0))
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
write(r1, &(0x7f0000000fc0), 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x10000, &(0x7f0000000740)={0x0, 0x1c9c380})
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x44, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0xe}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400})
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000200)=""/212, &(0x7f0000000300)=0xd4)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000d80), &(0x7f0000000dc0)=0x684)

01:21:52 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="3b99"])
ioctl$KVM_NMI(r2, 0xae9a)
semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000000)=""/17)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:21:52 executing program 2:
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="000775b005e381e5b3b60ced5c54dbb7", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1, 0x0, 0x0, 0x40000}}], 0x1, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

01:21:52 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0x13f)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x0, &(0x7f0000001fc0), 0xb}}], 0x4000000000003f0, 0x0)

01:21:52 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f00000000c0)='./file0\x00', 0xff, 0x1, &(0x7f0000000480)=[{&(0x7f0000000380)="443907574c1834e84efb20e8f38d5a5d5884c04b91062e9ccdf2090e3f6ad58d2abe3aeb21c3465f3688f2bd924faae972a5146c7b8be40d6544f0144548101b1d0aee39cb869b99eee2aa3ecbcb52e87e24664b8cda691b7cb8a77cf0f66d96a564a928cf52ed5afb0478db8cf8541041ee1082f49e471674ac98458a7c1161f233982d6d6261ed214bb788a4e6cf3f61458c402e74ea1ebb0e1d294bb85c82dc9c9ea510cfe742d6e6cb7887d7fd3b7412fda7108e5aacb6a329164525083f2f79684072a79f9a3236bee422e521b483f9e24ee7a9cc8c098dc281165730bc28b6c01d8a6c9e3f7390e1d0c8b064a0e51452542bea12c2", 0xf8, 0x8}], 0x800000, 0x0)
sendmmsg(r0, &(0x7f0000004500), 0x400006e, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, 0x0, 0x0, 0x1}, 0x20)
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x2, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1d63"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
r5 = dup(0xffffffffffffffff)
shutdown(r5, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
setsockopt$inet_tcp_int(r5, 0x6, 0x1000000000000017, &(0x7f0000000840)=0x7f, 0xffffffffffffff2a)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000800)=<r6=>0x0)
ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000007c0))
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000540)={{0x9, 0x3, 0xc72, 0x0, '\x00', 0x9}, 0x0, 0x2, 0x9, r6, 0x2, 0x4, 'syz1\x00', &(0x7f0000000100)=['userppp0ppp1system\x00', '!proccgroup\x00'], 0x1f, [], [0x0, 0x3, 0xe8a4, 0x3]})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getpid()
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
semget$private(0x0, 0x5, 0x10)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

01:21:52 executing program 0:
r0 = socket$packet(0x11, 0x40800000000003, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00\x00\x00\x00\x00\x00\xae\'\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendto$inet6(r0, &(0x7f0000001740)="030362000200600000000100fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110f118d0000f5cfe606f6925cbf34658ea132797b1abc5dc62600009b000000faffffff00000000aeb4", 0x6c, 0x0, 0x0, 0x0)

01:21:52 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="e3512277f661", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @local}, @icmp=@timestamp}}}}, 0x0)

01:21:52 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="3b99"])
ioctl$KVM_NMI(r2, 0xae9a)
semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000000)=""/17)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  630.834306] binder: 25808:25816 unknown command 1768317725
01:21:52 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="e3512277f661", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @local}, @icmp=@timestamp}}}}, 0x0)

[  630.892088] binder: 25808:25816 ioctl c0306201 20000140 returned -22
01:21:52 executing program 0:
mkdir(&(0x7f0000000980)='./file0\x00', 0x0)
mount(&(0x7f0000000140), &(0x7f00000015c0)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400})
recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{&(0x7f0000002840)=@l2, 0x80, &(0x7f0000002dc0)=[{&(0x7f00000028c0)=""/220, 0xdc}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2, &(0x7f0000002d40)=""/47, 0x2f}}], 0x1, 0x0, &(0x7f0000006400)={0x77359400})
sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000400), 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x40000000042, 0x105}, 0x14}}, 0x0)
dup(0xffffffffffffffff)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchmod(r1, 0xa)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000000))

[  631.037433] binder_alloc: binder_alloc_mmap_handler: 25808 20001000-20004000 already mapped failed -16
01:21:52 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="e3512277f661", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @local}, @icmp=@timestamp}}}}, 0x0)

[  631.126273] binder: 25808:25832 unknown command 1768317725
[  631.131930] binder: 25808:25832 ioctl c0306201 20000140 returned -22
[  631.186376] binder: BINDER_SET_CONTEXT_MGR already set
[  631.191769] binder: 25808:25816 ioctl 40046207 0 returned -16
01:21:53 executing program 0:
mkdir(&(0x7f0000000980)='./file0\x00', 0x0)
mount(&(0x7f0000000140), &(0x7f00000015c0)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400})
recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{&(0x7f0000002840)=@l2, 0x80, &(0x7f0000002dc0)=[{&(0x7f00000028c0)=""/220, 0xdc}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2, &(0x7f0000002d40)=""/47, 0x2f}}], 0x1, 0x0, &(0x7f0000006400)={0x77359400})
sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000400), 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x40000000042, 0x105}, 0x14}}, 0x0)
dup(0xffffffffffffffff)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchmod(r1, 0xa)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000000))

[  631.262166] binder_alloc: 25808: binder_alloc_buf, no vma
[  631.262848] binder: 25808:25830 Release 1 refcount change on invalid ref 1 ret -22
[  631.301284] binder: 25808:25838 transaction failed 29189/-3, size 24-8 line 3035
01:21:53 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="3b99"])
ioctl$KVM_NMI(r2, 0xae9a)
semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000000)=""/17)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:21:53 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = timerfd_create(0x8, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x5}}, 0x0)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/192, 0xc0}], 0x1)

01:21:53 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="e3512277f661", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @local}, @icmp=@timestamp}}}}, 0x0)

[  631.391297] binder: 25808:25822 BC_ACQUIRE_DONE u0000000000000000 no match
01:21:53 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0x13f)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x0, &(0x7f0000001fc0), 0xb}}], 0x4000000000003f0, 0x0)

01:21:53 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f00000000c0)='./file0\x00', 0xff, 0x1, &(0x7f0000000480)=[{&(0x7f0000000380)="443907574c1834e84efb20e8f38d5a5d5884c04b91062e9ccdf2090e3f6ad58d2abe3aeb21c3465f3688f2bd924faae972a5146c7b8be40d6544f0144548101b1d0aee39cb869b99eee2aa3ecbcb52e87e24664b8cda691b7cb8a77cf0f66d96a564a928cf52ed5afb0478db8cf8541041ee1082f49e471674ac98458a7c1161f233982d6d6261ed214bb788a4e6cf3f61458c402e74ea1ebb0e1d294bb85c82dc9c9ea510cfe742d6e6cb7887d7fd3b7412fda7108e5aacb6a329164525083f2f79684072a79f9a3236bee422e521b483f9e24ee7a9cc8c098dc281165730bc28b6c01d8a6c9e3f7390e1d0c8b064a0e51452542bea12c2", 0xf8, 0x8}], 0x800000, 0x0)
sendmmsg(r0, &(0x7f0000004500), 0x400006e, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, 0x0, 0x0, 0x1}, 0x20)
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x2, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1d63"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
r5 = dup(0xffffffffffffffff)
shutdown(r5, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
setsockopt$inet_tcp_int(r5, 0x6, 0x1000000000000017, &(0x7f0000000840)=0x7f, 0xffffffffffffff2a)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000800)=<r6=>0x0)
ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000007c0))
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000540)={{0x9, 0x3, 0xc72, 0x0, '\x00', 0x9}, 0x0, 0x2, 0x9, r6, 0x2, 0x4, 'syz1\x00', &(0x7f0000000100)=['userppp0ppp1system\x00', '!proccgroup\x00'], 0x1f, [], [0x0, 0x3, 0xe8a4, 0x3]})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getpid()
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
semget$private(0x0, 0x5, 0x10)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

01:21:53 executing program 0:
mkdir(&(0x7f0000000980)='./file0\x00', 0x0)
mount(&(0x7f0000000140), &(0x7f00000015c0)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400})
recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{&(0x7f0000002840)=@l2, 0x80, &(0x7f0000002dc0)=[{&(0x7f00000028c0)=""/220, 0xdc}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2, &(0x7f0000002d40)=""/47, 0x2f}}], 0x1, 0x0, &(0x7f0000006400)={0x77359400})
sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000400), 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x40000000042, 0x105}, 0x14}}, 0x0)
dup(0xffffffffffffffff)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchmod(r1, 0xa)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000000))

01:21:53 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f00000000c0)='./file0\x00', 0xff, 0x1, &(0x7f0000000480)=[{&(0x7f0000000380)="443907574c1834e84efb20e8f38d5a5d5884c04b91062e9ccdf2090e3f6ad58d2abe3aeb21c3465f3688f2bd924faae972a5146c7b8be40d6544f0144548101b1d0aee39cb869b99eee2aa3ecbcb52e87e24664b8cda691b7cb8a77cf0f66d96a564a928cf52ed5afb0478db8cf8541041ee1082f49e471674ac98458a7c1161f233982d6d6261ed214bb788a4e6cf3f61458c402e74ea1ebb0e1d294bb85c82dc9c9ea510cfe742d6e6cb7887d7fd3b7412fda7108e5aacb6a329164525083f2f79684072a79f9a3236bee422e521b483f9e24ee7a9cc8c098dc281165730bc28b6c01d8a6c9e3f7390e1d0c8b064a0e51452542bea12c2", 0xf8, 0x8}], 0x800000, 0x0)
sendmmsg(r0, &(0x7f0000004500), 0x400006e, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, 0x0, 0x0, 0x1}, 0x20)
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x2, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1d63"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
r5 = dup(0xffffffffffffffff)
shutdown(r5, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
setsockopt$inet_tcp_int(r5, 0x6, 0x1000000000000017, &(0x7f0000000840)=0x7f, 0xffffffffffffff2a)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000800)=<r6=>0x0)
ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000007c0))
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000540)={{0x9, 0x3, 0xc72, 0x0, '\x00', 0x9}, 0x0, 0x2, 0x9, r6, 0x2, 0x4, 'syz1\x00', &(0x7f0000000100)=['userppp0ppp1system\x00', '!proccgroup\x00'], 0x1f, [], [0x0, 0x3, 0xe8a4, 0x3]})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getpid()
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
semget$private(0x0, 0x5, 0x10)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

01:21:53 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f00000000c0)='./file0\x00', 0xff, 0x1, &(0x7f0000000480)=[{&(0x7f0000000380)="443907574c1834e84efb20e8f38d5a5d5884c04b91062e9ccdf2090e3f6ad58d2abe3aeb21c3465f3688f2bd924faae972a5146c7b8be40d6544f0144548101b1d0aee39cb869b99eee2aa3ecbcb52e87e24664b8cda691b7cb8a77cf0f66d96a564a928cf52ed5afb0478db8cf8541041ee1082f49e471674ac98458a7c1161f233982d6d6261ed214bb788a4e6cf3f61458c402e74ea1ebb0e1d294bb85c82dc9c9ea510cfe742d6e6cb7887d7fd3b7412fda7108e5aacb6a329164525083f2f79684072a79f9a3236bee422e521b483f9e24ee7a9cc8c098dc281165730bc28b6c01d8a6c9e3f7390e1d0c8b064a0e51452542bea12c2", 0xf8, 0x8}], 0x800000, 0x0)
sendmmsg(r0, &(0x7f0000004500), 0x400006e, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, 0x0, 0x0, 0x1}, 0x20)
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x2, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1d63"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
r5 = dup(0xffffffffffffffff)
shutdown(r5, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
setsockopt$inet_tcp_int(r5, 0x6, 0x1000000000000017, &(0x7f0000000840)=0x7f, 0xffffffffffffff2a)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000800)=<r6=>0x0)
ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000007c0))
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000540)={{0x9, 0x3, 0xc72, 0x0, '\x00', 0x9}, 0x0, 0x2, 0x9, r6, 0x2, 0x4, 'syz1\x00', &(0x7f0000000100)=['userppp0ppp1system\x00', '!proccgroup\x00'], 0x1f, [], [0x0, 0x3, 0xe8a4, 0x3]})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getpid()
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
semget$private(0x0, 0x5, 0x10)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

01:21:53 executing program 0:
mkdir(&(0x7f0000000980)='./file0\x00', 0x0)
mount(&(0x7f0000000140), &(0x7f00000015c0)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400})
recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{&(0x7f0000002840)=@l2, 0x80, &(0x7f0000002dc0)=[{&(0x7f00000028c0)=""/220, 0xdc}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2, &(0x7f0000002d40)=""/47, 0x2f}}], 0x1, 0x0, &(0x7f0000006400)={0x77359400})
sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000400), 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x40000000042, 0x105}, 0x14}}, 0x0)
dup(0xffffffffffffffff)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchmod(r1, 0xa)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000000))

01:21:53 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="3b99"])
ioctl$KVM_NMI(r2, 0xae9a)
semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000000)=""/17)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  631.968065] ceph: device name is missing path (no : separator in /dev/loop3)
[  632.006161] binder: 25868:25891 unknown command 1768317725
[  632.009932] ceph: device name is missing path (no : separator in /dev/loop2)
[  632.053247] binder: 25875:25887 unknown command 1768317725
[  632.069629] binder: 25868:25891 ioctl c0306201 20000140 returned -22
[  632.079071] binder: 25871:25881 unknown command 1768317725
[  632.090456] binder: 25875:25887 ioctl c0306201 20000140 returned -22
[  632.097583] binder: 25871:25881 ioctl c0306201 20000140 returned -22
[  632.105977] binder: BINDER_SET_CONTEXT_MGR already set
[  632.129426] binder: 25868:25873 ioctl 40046207 0 returned -16
[  632.129808] binder: BINDER_SET_CONTEXT_MGR already set
01:21:54 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f00000000c0)='./file0\x00', 0xff, 0x1, &(0x7f0000000480)=[{&(0x7f0000000380)="443907574c1834e84efb20e8f38d5a5d5884c04b91062e9ccdf2090e3f6ad58d2abe3aeb21c3465f3688f2bd924faae972a5146c7b8be40d6544f0144548101b1d0aee39cb869b99eee2aa3ecbcb52e87e24664b8cda691b7cb8a77cf0f66d96a564a928cf52ed5afb0478db8cf8541041ee1082f49e471674ac98458a7c1161f233982d6d6261ed214bb788a4e6cf3f61458c402e74ea1ebb0e1d294bb85c82dc9c9ea510cfe742d6e6cb7887d7fd3b7412fda7108e5aacb6a329164525083f2f79684072a79f9a3236bee422e521b483f9e24ee7a9cc8c098dc281165730bc28b6c01d8a6c9e3f7390e1d0c8b064a0e51452542bea12c2", 0xf8, 0x8}], 0x800000, 0x0)
sendmmsg(r0, &(0x7f0000004500), 0x400006e, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, 0x0, 0x0, 0x1}, 0x20)
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x2, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1d63"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
r5 = dup(0xffffffffffffffff)
shutdown(r5, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
setsockopt$inet_tcp_int(r5, 0x6, 0x1000000000000017, &(0x7f0000000840)=0x7f, 0xffffffffffffff2a)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000800)=<r6=>0x0)
ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000007c0))
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000540)={{0x9, 0x3, 0xc72, 0x0, '\x00', 0x9}, 0x0, 0x2, 0x9, r6, 0x2, 0x4, 'syz1\x00', &(0x7f0000000100)=['userppp0ppp1system\x00', '!proccgroup\x00'], 0x1f, [], [0x0, 0x3, 0xe8a4, 0x3]})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getpid()
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
semget$private(0x0, 0x5, 0x10)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

[  632.233570] binder: 25871:25881 Release 1 refcount change on invalid ref 1 ret -22
[  632.253038] binder: 25875:25893 ioctl 40046207 0 returned -16
[  632.260593] binder: BINDER_SET_CONTEXT_MGR already set
[  632.288244] binder_alloc: 25808: binder_alloc_buf, no vma
[  632.294808] binder: 25871:25885 ioctl 40046207 0 returned -16
[  632.306442] binder: 25868:25873 transaction failed 29189/-3, size 24-8 line 3035
[  632.327188] binder: 25871:25881 BC_ACQUIRE_DONE u0000000000000000 no match
[  632.336344] binder_alloc: 25808: binder_alloc_buf, no vma
[  632.373347] binder: 25868:25884 Release 1 refcount change on invalid ref 1 ret -22
[  632.382113] binder: 25871:25872 transaction failed 29189/-3, size 24-8 line 3035
[  632.382137] binder_alloc: 25808: binder_alloc_buf, no vma
01:21:54 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f00000000c0)='./file0\x00', 0xff, 0x1, &(0x7f0000000480)=[{&(0x7f0000000380)="443907574c1834e84efb20e8f38d5a5d5884c04b91062e9ccdf2090e3f6ad58d2abe3aeb21c3465f3688f2bd924faae972a5146c7b8be40d6544f0144548101b1d0aee39cb869b99eee2aa3ecbcb52e87e24664b8cda691b7cb8a77cf0f66d96a564a928cf52ed5afb0478db8cf8541041ee1082f49e471674ac98458a7c1161f233982d6d6261ed214bb788a4e6cf3f61458c402e74ea1ebb0e1d294bb85c82dc9c9ea510cfe742d6e6cb7887d7fd3b7412fda7108e5aacb6a329164525083f2f79684072a79f9a3236bee422e521b483f9e24ee7a9cc8c098dc281165730bc28b6c01d8a6c9e3f7390e1d0c8b064a0e51452542bea12c2", 0xf8, 0x8}], 0x800000, 0x0)
sendmmsg(r0, &(0x7f0000004500), 0x400006e, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, 0x0, 0x0, 0x1}, 0x20)
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x2, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1d63"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
r5 = dup(0xffffffffffffffff)
shutdown(r5, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
setsockopt$inet_tcp_int(r5, 0x6, 0x1000000000000017, &(0x7f0000000840)=0x7f, 0xffffffffffffff2a)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000800)=<r6=>0x0)
ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000007c0))
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000540)={{0x9, 0x3, 0xc72, 0x0, '\x00', 0x9}, 0x0, 0x2, 0x9, r6, 0x2, 0x4, 'syz1\x00', &(0x7f0000000100)=['userppp0ppp1system\x00', '!proccgroup\x00'], 0x1f, [], [0x0, 0x3, 0xe8a4, 0x3]})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getpid()
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
semget$private(0x0, 0x5, 0x10)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

[  632.426865] binder: 25875:25887 Release 1 refcount change on invalid ref 1 ret -22
[  632.458616] binder: 25875:25876 transaction failed 29189/-3, size 24-8 line 3035
[  632.486923] binder: 25868:25873 BC_ACQUIRE_DONE u0000000000000000 no match
[  632.504331] binder: 25875:25887 BC_ACQUIRE_DONE u0000000000000000 no match
01:21:54 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f00000000c0)='./file0\x00', 0xff, 0x1, &(0x7f0000000480)=[{&(0x7f0000000380)="443907574c1834e84efb20e8f38d5a5d5884c04b91062e9ccdf2090e3f6ad58d2abe3aeb21c3465f3688f2bd924faae972a5146c7b8be40d6544f0144548101b1d0aee39cb869b99eee2aa3ecbcb52e87e24664b8cda691b7cb8a77cf0f66d96a564a928cf52ed5afb0478db8cf8541041ee1082f49e471674ac98458a7c1161f233982d6d6261ed214bb788a4e6cf3f61458c402e74ea1ebb0e1d294bb85c82dc9c9ea510cfe742d6e6cb7887d7fd3b7412fda7108e5aacb6a329164525083f2f79684072a79f9a3236bee422e521b483f9e24ee7a9cc8c098dc281165730bc28b6c01d8a6c9e3f7390e1d0c8b064a0e51452542bea12c2", 0xf8, 0x8}], 0x800000, 0x0)
sendmmsg(r0, &(0x7f0000004500), 0x400006e, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, 0x0, 0x0, 0x1}, 0x20)
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x2, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1d63"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
r5 = dup(0xffffffffffffffff)
shutdown(r5, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
setsockopt$inet_tcp_int(r5, 0x6, 0x1000000000000017, &(0x7f0000000840)=0x7f, 0xffffffffffffff2a)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000800)=<r6=>0x0)
ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000007c0))
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000540)={{0x9, 0x3, 0xc72, 0x0, '\x00', 0x9}, 0x0, 0x2, 0x9, r6, 0x2, 0x4, 'syz1\x00', &(0x7f0000000100)=['userppp0ppp1system\x00', '!proccgroup\x00'], 0x1f, [], [0x0, 0x3, 0xe8a4, 0x3]})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getpid()
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
semget$private(0x0, 0x5, 0x10)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

01:21:54 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f00000000c0)='./file0\x00', 0xff, 0x1, &(0x7f0000000480)=[{&(0x7f0000000380)="443907574c1834e84efb20e8f38d5a5d5884c04b91062e9ccdf2090e3f6ad58d2abe3aeb21c3465f3688f2bd924faae972a5146c7b8be40d6544f0144548101b1d0aee39cb869b99eee2aa3ecbcb52e87e24664b8cda691b7cb8a77cf0f66d96a564a928cf52ed5afb0478db8cf8541041ee1082f49e471674ac98458a7c1161f233982d6d6261ed214bb788a4e6cf3f61458c402e74ea1ebb0e1d294bb85c82dc9c9ea510cfe742d6e6cb7887d7fd3b7412fda7108e5aacb6a329164525083f2f79684072a79f9a3236bee422e521b483f9e24ee7a9cc8c098dc281165730bc28b6c01d8a6c9e3f7390e1d0c8b064a0e51452542bea12c2", 0xf8, 0x8}], 0x800000, 0x0)
sendmmsg(r0, &(0x7f0000004500), 0x400006e, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, 0x0, 0x0, 0x1}, 0x20)
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x2, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1d63"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
r5 = dup(0xffffffffffffffff)
shutdown(r5, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
setsockopt$inet_tcp_int(r5, 0x6, 0x1000000000000017, &(0x7f0000000840)=0x7f, 0xffffffffffffff2a)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000800)=<r6=>0x0)
ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000007c0))
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000540)={{0x9, 0x3, 0xc72, 0x0, '\x00', 0x9}, 0x0, 0x2, 0x9, r6, 0x2, 0x4, 'syz1\x00', &(0x7f0000000100)=['userppp0ppp1system\x00', '!proccgroup\x00'], 0x1f, [], [0x0, 0x3, 0xe8a4, 0x3]})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getpid()
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
semget$private(0x0, 0x5, 0x10)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

[  632.561247] binder: 25900:25901 unknown command 1768317725
[  632.596278] binder: 25900:25901 ioctl c0306201 20000140 returned -22
01:21:54 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f00000000c0)='./file0\x00', 0xff, 0x1, &(0x7f0000000480)=[{&(0x7f0000000380)="443907574c1834e84efb20e8f38d5a5d5884c04b91062e9ccdf2090e3f6ad58d2abe3aeb21c3465f3688f2bd924faae972a5146c7b8be40d6544f0144548101b1d0aee39cb869b99eee2aa3ecbcb52e87e24664b8cda691b7cb8a77cf0f66d96a564a928cf52ed5afb0478db8cf8541041ee1082f49e471674ac98458a7c1161f233982d6d6261ed214bb788a4e6cf3f61458c402e74ea1ebb0e1d294bb85c82dc9c9ea510cfe742d6e6cb7887d7fd3b7412fda7108e5aacb6a329164525083f2f79684072a79f9a3236bee422e521b483f9e24ee7a9cc8c098dc281165730bc28b6c01d8a6c9e3f7390e1d0c8b064a0e51452542bea12c2", 0xf8, 0x8}], 0x800000, 0x0)
sendmmsg(r0, &(0x7f0000004500), 0x400006e, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, 0x0, 0x0, 0x1}, 0x20)
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x2, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1d63"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
r5 = dup(0xffffffffffffffff)
shutdown(r5, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
setsockopt$inet_tcp_int(r5, 0x6, 0x1000000000000017, &(0x7f0000000840)=0x7f, 0xffffffffffffff2a)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000800)=<r6=>0x0)
ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000007c0))
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000540)={{0x9, 0x3, 0xc72, 0x0, '\x00', 0x9}, 0x0, 0x2, 0x9, r6, 0x2, 0x4, 'syz1\x00', &(0x7f0000000100)=['userppp0ppp1system\x00', '!proccgroup\x00'], 0x1f, [], [0x0, 0x3, 0xe8a4, 0x3]})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getpid()
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
semget$private(0x0, 0x5, 0x10)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

01:21:54 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0x13f)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x0, &(0x7f0000001fc0), 0xb}}], 0x4000000000003f0, 0x0)

[  632.607765] binder: BINDER_SET_CONTEXT_MGR already set
[  632.686919] binder: 25900:25901 ioctl 40046207 0 returned -16
[  632.749358] binder_alloc: 25808: binder_alloc_buf, no vma
[  632.755358] binder: 25900:25904 transaction failed 29189/-3, size 24-8 line 3035
[  632.815346] binder: 25908:25914 unknown command 1768317725
[  632.853119] binder: 25900:25932 Release 1 refcount change on invalid ref 1 ret -22
[  632.854809] ceph: device name is missing path (no : separator in /dev/loop2)
[  632.872532] ceph: device name is missing path (no : separator in /dev/loop3)
[  632.881353] binder: 25916:25918 unknown command 1768317725
[  632.881716] binder: 25919:25928 unknown command 1768317725
[  632.907339] binder: 25908:25914 ioctl c0306201 20000140 returned -22
[  632.919526] binder: 25919:25928 ioctl c0306201 20000140 returned -22
[  632.927338] binder: BINDER_SET_CONTEXT_MGR already set
[  632.970990] binder: 25900:25901 BC_ACQUIRE_DONE u0000000000000000 no match
[  632.984905] binder: 25916:25922 ioctl 40046207 0 returned -16
[  632.985275] binder_alloc: 25808: binder_alloc_buf, no vma
[  632.991729] binder: 25925:25931 unknown command 1768317725
01:21:54 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f00000000c0)='./file0\x00', 0xff, 0x1, &(0x7f0000000480)=[{&(0x7f0000000380)="443907574c1834e84efb20e8f38d5a5d5884c04b91062e9ccdf2090e3f6ad58d2abe3aeb21c3465f3688f2bd924faae972a5146c7b8be40d6544f0144548101b1d0aee39cb869b99eee2aa3ecbcb52e87e24664b8cda691b7cb8a77cf0f66d96a564a928cf52ed5afb0478db8cf8541041ee1082f49e471674ac98458a7c1161f233982d6d6261ed214bb788a4e6cf3f61458c402e74ea1ebb0e1d294bb85c82dc9c9ea510cfe742d6e6cb7887d7fd3b7412fda7108e5aacb6a329164525083f2f79684072a79f9a3236bee422e521b483f9e24ee7a9cc8c098dc281165730bc28b6c01d8a6c9e3f7390e1d0c8b064a0e51452542bea12c2", 0xf8, 0x8}], 0x800000, 0x0)
sendmmsg(r0, &(0x7f0000004500), 0x400006e, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, 0x0, 0x0, 0x1}, 0x20)
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x2, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1d63"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
r5 = dup(0xffffffffffffffff)
shutdown(r5, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
setsockopt$inet_tcp_int(r5, 0x6, 0x1000000000000017, &(0x7f0000000840)=0x7f, 0xffffffffffffff2a)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000800)=<r6=>0x0)
ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000007c0))
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000540)={{0x9, 0x3, 0xc72, 0x0, '\x00', 0x9}, 0x0, 0x2, 0x9, r6, 0x2, 0x4, 'syz1\x00', &(0x7f0000000100)=['userppp0ppp1system\x00', '!proccgroup\x00'], 0x1f, [], [0x0, 0x3, 0xe8a4, 0x3]})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getpid()
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
semget$private(0x0, 0x5, 0x10)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

[  633.016881] binder: BINDER_SET_CONTEXT_MGR already set
[  633.029606] binder: 25919:25920 ioctl 40046207 0 returned -16
[  633.049162] binder: 25925:25931 ioctl c0306201 20000140 returned -22
[  633.056693] binder: BINDER_SET_CONTEXT_MGR already set
[  633.062007] binder: 25908:25933 ioctl 40046207 0 returned -16
[  633.088885] binder: 25916:25918 ioctl c0306201 20000140 returned -22
[  633.112030] binder_alloc: 25808: binder_alloc_buf, no vma
[  633.117989] binder: 25919:25920 transaction failed 29189/-3, size 24-8 line 3035
[  633.125864] binder: 25916:25936 transaction failed 29189/-3, size 24-8 line 3035
[  633.146653] binder: 25916:25922 Release 1 refcount change on invalid ref 1 ret -22
[  633.155053] binder: 25919:25928 Release 1 refcount change on invalid ref 1 ret -22
[  633.177112] binder: BINDER_SET_CONTEXT_MGR already set
[  633.224286] binder: 25925:25926 ioctl 40046207 0 returned -16
[  633.224536] binder_alloc: 25808: binder_alloc_buf, no vma
[  633.231505] binder: 25919:25920 BC_ACQUIRE_DONE u0000000000000000 no match
[  633.280317] binder: 25940:25944 unknown command 1768317725
[  633.293188] binder: 25908:25914 Release 1 refcount change on invalid ref 1 ret -22
01:21:55 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f00000000c0)='./file0\x00', 0xff, 0x1, &(0x7f0000000480)=[{&(0x7f0000000380)="443907574c1834e84efb20e8f38d5a5d5884c04b91062e9ccdf2090e3f6ad58d2abe3aeb21c3465f3688f2bd924faae972a5146c7b8be40d6544f0144548101b1d0aee39cb869b99eee2aa3ecbcb52e87e24664b8cda691b7cb8a77cf0f66d96a564a928cf52ed5afb0478db8cf8541041ee1082f49e471674ac98458a7c1161f233982d6d6261ed214bb788a4e6cf3f61458c402e74ea1ebb0e1d294bb85c82dc9c9ea510cfe742d6e6cb7887d7fd3b7412fda7108e5aacb6a329164525083f2f79684072a79f9a3236bee422e521b483f9e24ee7a9cc8c098dc281165730bc28b6c01d8a6c9e3f7390e1d0c8b064a0e51452542bea12c2", 0xf8, 0x8}], 0x800000, 0x0)
sendmmsg(r0, &(0x7f0000004500), 0x400006e, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, 0x0, 0x0, 0x1}, 0x20)
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x2, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1d63"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
r5 = dup(0xffffffffffffffff)
shutdown(r5, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
setsockopt$inet_tcp_int(r5, 0x6, 0x1000000000000017, &(0x7f0000000840)=0x7f, 0xffffffffffffff2a)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000800)=<r6=>0x0)
ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000007c0))
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000540)={{0x9, 0x3, 0xc72, 0x0, '\x00', 0x9}, 0x0, 0x2, 0x9, r6, 0x2, 0x4, 'syz1\x00', &(0x7f0000000100)=['userppp0ppp1system\x00', '!proccgroup\x00'], 0x1f, [], [0x0, 0x3, 0xe8a4, 0x3]})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getpid()
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
semget$private(0x0, 0x5, 0x10)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

[  633.324224] binder: 25940:25944 ioctl c0306201 20000140 returned -22
[  633.333417] binder: 25916:25918 BC_ACQUIRE_DONE u0000000000000000 no match
[  633.334925] binder: 25925:25926 Release 1 refcount change on invalid ref 1 ret -22
[  633.348655] binder: 25908:25933 BC_ACQUIRE_DONE u0000000000000000 no match
[  633.369152] binder_alloc: 25808: binder_alloc_buf, no vma
[  633.392764] binder: 25908:25909 transaction failed 29189/-3, size 24-8 line 3035
[  633.416775] binder: BINDER_SET_CONTEXT_MGR already set
01:21:55 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f00000000c0)='./file0\x00', 0xff, 0x1, &(0x7f0000000480)=[{&(0x7f0000000380)="443907574c1834e84efb20e8f38d5a5d5884c04b91062e9ccdf2090e3f6ad58d2abe3aeb21c3465f3688f2bd924faae972a5146c7b8be40d6544f0144548101b1d0aee39cb869b99eee2aa3ecbcb52e87e24664b8cda691b7cb8a77cf0f66d96a564a928cf52ed5afb0478db8cf8541041ee1082f49e471674ac98458a7c1161f233982d6d6261ed214bb788a4e6cf3f61458c402e74ea1ebb0e1d294bb85c82dc9c9ea510cfe742d6e6cb7887d7fd3b7412fda7108e5aacb6a329164525083f2f79684072a79f9a3236bee422e521b483f9e24ee7a9cc8c098dc281165730bc28b6c01d8a6c9e3f7390e1d0c8b064a0e51452542bea12c2", 0xf8, 0x8}], 0x800000, 0x0)
sendmmsg(r0, &(0x7f0000004500), 0x400006e, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, 0x0, 0x0, 0x1}, 0x20)
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x2, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1d63"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
r5 = dup(0xffffffffffffffff)
shutdown(r5, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
setsockopt$inet_tcp_int(r5, 0x6, 0x1000000000000017, &(0x7f0000000840)=0x7f, 0xffffffffffffff2a)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000800)=<r6=>0x0)
ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000007c0))
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000540)={{0x9, 0x3, 0xc72, 0x0, '\x00', 0x9}, 0x0, 0x2, 0x9, r6, 0x2, 0x4, 'syz1\x00', &(0x7f0000000100)=['userppp0ppp1system\x00', '!proccgroup\x00'], 0x1f, [], [0x0, 0x3, 0xe8a4, 0x3]})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getpid()
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
semget$private(0x0, 0x5, 0x10)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

01:21:55 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0x13f)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x0, &(0x7f0000001fc0), 0xb}}], 0x4000000000003f0, 0x0)

[  633.441709] binder: 25925:25931 transaction failed 29189/-3, size 24-8 line 3035
[  633.442954] binder: 25925:25926 BC_ACQUIRE_DONE u0000000000000000 no match
[  633.454441] binder: 25940:25941 ioctl 40046207 0 returned -16
01:21:55 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f00000000c0)='./file0\x00', 0xff, 0x1, &(0x7f0000000480)=[{&(0x7f0000000380)="443907574c1834e84efb20e8f38d5a5d5884c04b91062e9ccdf2090e3f6ad58d2abe3aeb21c3465f3688f2bd924faae972a5146c7b8be40d6544f0144548101b1d0aee39cb869b99eee2aa3ecbcb52e87e24664b8cda691b7cb8a77cf0f66d96a564a928cf52ed5afb0478db8cf8541041ee1082f49e471674ac98458a7c1161f233982d6d6261ed214bb788a4e6cf3f61458c402e74ea1ebb0e1d294bb85c82dc9c9ea510cfe742d6e6cb7887d7fd3b7412fda7108e5aacb6a329164525083f2f79684072a79f9a3236bee422e521b483f9e24ee7a9cc8c098dc281165730bc28b6c01d8a6c9e3f7390e1d0c8b064a0e51452542bea12c2", 0xf8, 0x8}], 0x800000, 0x0)
sendmmsg(r0, &(0x7f0000004500), 0x400006e, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, 0x0, 0x0, 0x1}, 0x20)
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x2, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1d63"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
r5 = dup(0xffffffffffffffff)
shutdown(r5, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
setsockopt$inet_tcp_int(r5, 0x6, 0x1000000000000017, &(0x7f0000000840)=0x7f, 0xffffffffffffff2a)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000800)=<r6=>0x0)
ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000007c0))
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000540)={{0x9, 0x3, 0xc72, 0x0, '\x00', 0x9}, 0x0, 0x2, 0x9, r6, 0x2, 0x4, 'syz1\x00', &(0x7f0000000100)=['userppp0ppp1system\x00', '!proccgroup\x00'], 0x1f, [], [0x0, 0x3, 0xe8a4, 0x3]})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getpid()
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
semget$private(0x0, 0x5, 0x10)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

[  633.518989] binder_alloc: 25808: binder_alloc_buf, no vma
[  633.615583] binder: 25940:25944 Release 1 refcount change on invalid ref 1 ret -22
[  633.648500] binder: 25949:25957 unknown command 1768317725
01:21:55 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f00000000c0)='./file0\x00', 0xff, 0x1, &(0x7f0000000480)=[{&(0x7f0000000380)="443907574c1834e84efb20e8f38d5a5d5884c04b91062e9ccdf2090e3f6ad58d2abe3aeb21c3465f3688f2bd924faae972a5146c7b8be40d6544f0144548101b1d0aee39cb869b99eee2aa3ecbcb52e87e24664b8cda691b7cb8a77cf0f66d96a564a928cf52ed5afb0478db8cf8541041ee1082f49e471674ac98458a7c1161f233982d6d6261ed214bb788a4e6cf3f61458c402e74ea1ebb0e1d294bb85c82dc9c9ea510cfe742d6e6cb7887d7fd3b7412fda7108e5aacb6a329164525083f2f79684072a79f9a3236bee422e521b483f9e24ee7a9cc8c098dc281165730bc28b6c01d8a6c9e3f7390e1d0c8b064a0e51452542bea12c2", 0xf8, 0x8}], 0x800000, 0x0)
sendmmsg(r0, &(0x7f0000004500), 0x400006e, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, 0x0, 0x0, 0x1}, 0x20)
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x2, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1d63"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
r5 = dup(0xffffffffffffffff)
shutdown(r5, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
setsockopt$inet_tcp_int(r5, 0x6, 0x1000000000000017, &(0x7f0000000840)=0x7f, 0xffffffffffffff2a)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000800)=<r6=>0x0)
ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000007c0))
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000540)={{0x9, 0x3, 0xc72, 0x0, '\x00', 0x9}, 0x0, 0x2, 0x9, r6, 0x2, 0x4, 'syz1\x00', &(0x7f0000000100)=['userppp0ppp1system\x00', '!proccgroup\x00'], 0x1f, [], [0x0, 0x3, 0xe8a4, 0x3]})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getpid()
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
semget$private(0x0, 0x5, 0x10)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

[  633.669229] binder: 25940:25941 transaction failed 29189/-3, size 24-8 line 3035
[  633.693607] binder: 25949:25957 ioctl c0306201 20000140 returned -22
[  633.705182] ceph: device name is missing path (no : separator in /dev/loop2)
[  633.747862] binder: 25940:25944 BC_ACQUIRE_DONE u0000000000000000 no match
[  633.860873] ceph: device name is missing path (no : separator in /dev/loop3)
[  633.901445] binder: BINDER_SET_CONTEXT_MGR already set
[  633.916659] binder: 25958:25959 unknown command 1768317725
[  633.925646] binder: 25949:25952 ioctl 40046207 0 returned -16
[  633.935758] binder: 25961:25964 unknown command 1768317725
[  633.949355] binder: 25961:25964 ioctl c0306201 20000140 returned -22
[  633.962448] binder: BINDER_SET_CONTEXT_MGR already set
[  633.965378] binder: 25958:25959 ioctl c0306201 20000140 returned -22
[  633.979269] binder: 25958:25968 ioctl 40046207 0 returned -16
01:21:55 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x44007)

01:21:55 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f00000000c0)='./file0\x00', 0xff, 0x1, &(0x7f0000000480)=[{&(0x7f0000000380)="443907574c1834e84efb20e8f38d5a5d5884c04b91062e9ccdf2090e3f6ad58d2abe3aeb21c3465f3688f2bd924faae972a5146c7b8be40d6544f0144548101b1d0aee39cb869b99eee2aa3ecbcb52e87e24664b8cda691b7cb8a77cf0f66d96a564a928cf52ed5afb0478db8cf8541041ee1082f49e471674ac98458a7c1161f233982d6d6261ed214bb788a4e6cf3f61458c402e74ea1ebb0e1d294bb85c82dc9c9ea510cfe742d6e6cb7887d7fd3b7412fda7108e5aacb6a329164525083f2f79684072a79f9a3236bee422e521b483f9e24ee7a9cc8c098dc281165730bc28b6c01d8a6c9e3f7390e1d0c8b064a0e51452542bea12c2", 0xf8, 0x8}], 0x800000, 0x0)
sendmmsg(r0, &(0x7f0000004500), 0x400006e, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, 0x0, 0x0, 0x1}, 0x20)
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x2, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1d63"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
r5 = dup(0xffffffffffffffff)
shutdown(r5, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
setsockopt$inet_tcp_int(r5, 0x6, 0x1000000000000017, &(0x7f0000000840)=0x7f, 0xffffffffffffff2a)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000800)=<r6=>0x0)
ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000007c0))
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000540)={{0x9, 0x3, 0xc72, 0x0, '\x00', 0x9}, 0x0, 0x2, 0x9, r6, 0x2, 0x4, 'syz1\x00', &(0x7f0000000100)=['userppp0ppp1system\x00', '!proccgroup\x00'], 0x1f, [], [0x0, 0x3, 0xe8a4, 0x3]})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getpid()
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
semget$private(0x0, 0x5, 0x10)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

[  634.017088] binder: 25971:25973 unknown command 1768317725
[  634.034321] binder: BINDER_SET_CONTEXT_MGR already set
[  634.041572] binder: 25971:25973 ioctl c0306201 20000140 returned -22
[  634.054795] binder: 25961:25972 ioctl 40046207 0 returned -16
[  634.094606] binder: BINDER_SET_CONTEXT_MGR already set
[  634.120511] binder: 25971:25973 ioctl 40046207 0 returned -16
01:21:56 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.mem_hardwall\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x80000000000008)

01:21:56 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f00000000c0)='./file0\x00', 0xff, 0x1, &(0x7f0000000480)=[{&(0x7f0000000380)="443907574c1834e84efb20e8f38d5a5d5884c04b91062e9ccdf2090e3f6ad58d2abe3aeb21c3465f3688f2bd924faae972a5146c7b8be40d6544f0144548101b1d0aee39cb869b99eee2aa3ecbcb52e87e24664b8cda691b7cb8a77cf0f66d96a564a928cf52ed5afb0478db8cf8541041ee1082f49e471674ac98458a7c1161f233982d6d6261ed214bb788a4e6cf3f61458c402e74ea1ebb0e1d294bb85c82dc9c9ea510cfe742d6e6cb7887d7fd3b7412fda7108e5aacb6a329164525083f2f79684072a79f9a3236bee422e521b483f9e24ee7a9cc8c098dc281165730bc28b6c01d8a6c9e3f7390e1d0c8b064a0e51452542bea12c2", 0xf8, 0x8}], 0x800000, 0x0)
sendmmsg(r0, &(0x7f0000004500), 0x400006e, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, 0x0, 0x0, 0x1}, 0x20)
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x2, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1d63"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
r5 = dup(0xffffffffffffffff)
shutdown(r5, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
setsockopt$inet_tcp_int(r5, 0x6, 0x1000000000000017, &(0x7f0000000840)=0x7f, 0xffffffffffffff2a)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000800)=<r6=>0x0)
ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000007c0))
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000540)={{0x9, 0x3, 0xc72, 0x0, '\x00', 0x9}, 0x0, 0x2, 0x9, r6, 0x2, 0x4, 'syz1\x00', &(0x7f0000000100)=['userppp0ppp1system\x00', '!proccgroup\x00'], 0x1f, [], [0x0, 0x3, 0xe8a4, 0x3]})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getpid()
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
semget$private(0x0, 0x5, 0x10)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

01:21:56 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x44007)

[  634.346675] binder: 25984:25992 unknown command 1768317725
[  634.381858] binder: BINDER_SET_CONTEXT_MGR already set
[  634.421383] binder: 25984:25992 ioctl c0306201 20000140 returned -22
[  634.493319] binder: 25984:25997 ioctl 40046207 0 returned -16
01:21:56 executing program 5:
mkdir(&(0x7f0000000080)='./control\x00', 0x0)
mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480))
unshare(0x60000)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0)
mount(&(0x7f0000000080)=ANY=[], &(0x7f00000000c0)='./control\x00', 0x0, 0x1000, 0x0)
write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30)
unlink(&(0x7f0000000340)='./control/file0\x00')
rmdir(&(0x7f0000000100)='./control\x00')
close(r0)

01:21:56 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x44007)

01:21:56 executing program 2:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x8008330e, 0x0)

01:21:56 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x101002, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246)
ioctl$PPPIOCSFLAGS(r0, 0x40047459, 0x0)
r1 = memfd_create(&(0x7f0000000140)='^\x00', 0x0)
readv(r0, 0x0, 0x0)
pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
sendfile(r0, r1, &(0x7f00000ddff8)=0x2, 0x102003f00)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0xf2}, &(0x7f0000000280)=0x8)

[  634.662320] binder: 26000:26006 unknown command 1768317725
[  634.714905] binder: BINDER_SET_CONTEXT_MGR already set
01:21:56 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x44007)

[  634.754755] binder: 26000:26006 ioctl c0306201 20000140 returned -22
01:21:56 executing program 2:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x8008330e, 0x0)

[  634.836369] binder: 26000:26012 ioctl 40046207 0 returned -16
01:21:56 executing program 5:
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x8000009)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540))
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
capget(&(0x7f00000001c0)={0x20080522, r2}, &(0x7f0000000200)={0x9, 0x81, 0xffffffff, 0x6, 0x3ff, 0x8001})
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = dup(r4)
fsync(r0)
ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, &(0x7f0000000280)={0x6})
ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000240)={&(0x7f0000000740)="eee831c4c55ec237f036e607532e6be515e0ff59eb07ca967784d01655a33a563c297579808c05c2a32773aa52580871a379712644cd3fe309a095938a2699f285daf00f0c5072970a04d508e74dce8d091b9a0d946312e9543ffaf5c41d7507c95443fb0c4d26a2411c4684267a142a2db6dc35d80807e4b29643daa044b555ae0533296509e0fda89f", 0x8a})
ioctl$int_in(r4, 0x5452, &(0x7f0000000580)=0xe2e)
fcntl$lock(r1, 0x7, &(0x7f0000000380)={0x802000001, 0x0, 0x5, 0xffffffff80000000, r2})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='syzkaller1\x00', 0x10)
ptrace$setregset(0x4205, r2, 0x3, 0x0)
io_setup(0x20, &(0x7f0000000300)=<r6=>0x0)
getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000840)=""/200, &(0x7f0000000340)=0xc8)
perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x4bc, 0xc141, 0x81, 0x7, 0x0, 0xffffffffffff43a5, 0x1000, 0x9, 0x7, 0x400, 0x3e, 0x4, 0x69, 0xfffffffffffffff9, 0x1, 0xd30, 0x6, 0x3, 0x8, 0x200, 0xed, 0x3, 0x7, 0x0, 0x10000, 0xc000, 0x6, 0x8000, 0xfffffffffffffffa, 0x6, 0xba39, 0x5b, 0x7, 0xd, 0x400, 0x5, 0x0, 0x2, 0x5, @perf_config_ext={0xfffffffffffffe01, 0x8}, 0x100, 0x6, 0x6, 0xf, 0x2, 0x9, 0x368}, r2, 0x2, r3, 0x1)
io_cancel(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x423, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x0)
bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
ftruncate(0xffffffffffffffff, 0x2007fff)

01:21:56 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)={'nat\x00'}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000b5c029100000f6f4d1a400650013000008"], 0x1}], 0x1}, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x40, &(0x7f0000000080), 0x1ce)

01:21:56 executing program 2:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x8008330e, 0x0)

01:21:56 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x400000053, 0xfffffffc, 0x6, 0x0, @scatter={0x0, 0x384c8, 0x0}, &(0x7f0000000100)="482e2cf215c6", 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6})

01:21:56 executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0x1ff, 0x4}}, 0xa)
io_setup(0x3, &(0x7f0000000000)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000022c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3cf, 0x0, 0x0, 0x0, 0xffffffffffffff9c}])

[  635.078154] IPVS: length: 200 != 24
01:21:57 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x101002, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246)
ioctl$PPPIOCSFLAGS(r0, 0x40047459, 0x0)
r1 = memfd_create(&(0x7f0000000140)='^\x00', 0x0)
readv(r0, 0x0, 0x0)
pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
sendfile(r0, r1, &(0x7f00000ddff8)=0x2, 0x102003f00)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0xf2}, &(0x7f0000000280)=0x8)

[  635.187559] IPVS: length: 200 != 24
01:21:57 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)={'nat\x00'}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000b5c029100000f6f4d1a400650013000008"], 0x1}], 0x1}, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x40, &(0x7f0000000080), 0x1ce)

01:21:57 executing program 2:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x8008330e, 0x0)

01:21:57 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f47725390000000000000000000000000000000000000000000000195e23", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r2}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x01!\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\x00'}})
dup(0xffffffffffffffff)

01:21:57 executing program 5:
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x8000009)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540))
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
capget(&(0x7f00000001c0)={0x20080522, r2}, &(0x7f0000000200)={0x9, 0x81, 0xffffffff, 0x6, 0x3ff, 0x8001})
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = dup(r4)
fsync(r0)
ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, &(0x7f0000000280)={0x6})
ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000240)={&(0x7f0000000740)="eee831c4c55ec237f036e607532e6be515e0ff59eb07ca967784d01655a33a563c297579808c05c2a32773aa52580871a379712644cd3fe309a095938a2699f285daf00f0c5072970a04d508e74dce8d091b9a0d946312e9543ffaf5c41d7507c95443fb0c4d26a2411c4684267a142a2db6dc35d80807e4b29643daa044b555ae0533296509e0fda89f", 0x8a})
ioctl$int_in(r4, 0x5452, &(0x7f0000000580)=0xe2e)
fcntl$lock(r1, 0x7, &(0x7f0000000380)={0x802000001, 0x0, 0x5, 0xffffffff80000000, r2})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='syzkaller1\x00', 0x10)
ptrace$setregset(0x4205, r2, 0x3, 0x0)
io_setup(0x20, &(0x7f0000000300)=<r6=>0x0)
getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000840)=""/200, &(0x7f0000000340)=0xc8)
perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x4bc, 0xc141, 0x81, 0x7, 0x0, 0xffffffffffff43a5, 0x1000, 0x9, 0x7, 0x400, 0x3e, 0x4, 0x69, 0xfffffffffffffff9, 0x1, 0xd30, 0x6, 0x3, 0x8, 0x200, 0xed, 0x3, 0x7, 0x0, 0x10000, 0xc000, 0x6, 0x8000, 0xfffffffffffffffa, 0x6, 0xba39, 0x5b, 0x7, 0xd, 0x400, 0x5, 0x0, 0x2, 0x5, @perf_config_ext={0xfffffffffffffe01, 0x8}, 0x100, 0x6, 0x6, 0xf, 0x2, 0x9, 0x368}, r2, 0x2, r3, 0x1)
io_cancel(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x423, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x0)
bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
ftruncate(0xffffffffffffffff, 0x2007fff)

01:21:57 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)={'nat\x00'}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000b5c029100000f6f4d1a400650013000008"], 0x1}], 0x1}, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x40, &(0x7f0000000080), 0x1ce)

01:21:57 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f47725390000000000000000000000000000000000000000000000195e23", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r2}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x01!\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\x00'}})
dup(0xffffffffffffffff)

[  635.495507] IPVS: length: 200 != 24
01:21:57 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f47725390000000000000000000000000000000000000000000000195e23", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r2}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x01!\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\x00'}})
dup(0xffffffffffffffff)

01:21:57 executing program 5:
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x8000009)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540))
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
capget(&(0x7f00000001c0)={0x20080522, r2}, &(0x7f0000000200)={0x9, 0x81, 0xffffffff, 0x6, 0x3ff, 0x8001})
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = dup(r4)
fsync(r0)
ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, &(0x7f0000000280)={0x6})
ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000240)={&(0x7f0000000740)="eee831c4c55ec237f036e607532e6be515e0ff59eb07ca967784d01655a33a563c297579808c05c2a32773aa52580871a379712644cd3fe309a095938a2699f285daf00f0c5072970a04d508e74dce8d091b9a0d946312e9543ffaf5c41d7507c95443fb0c4d26a2411c4684267a142a2db6dc35d80807e4b29643daa044b555ae0533296509e0fda89f", 0x8a})
ioctl$int_in(r4, 0x5452, &(0x7f0000000580)=0xe2e)
fcntl$lock(r1, 0x7, &(0x7f0000000380)={0x802000001, 0x0, 0x5, 0xffffffff80000000, r2})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='syzkaller1\x00', 0x10)
ptrace$setregset(0x4205, r2, 0x3, 0x0)
io_setup(0x20, &(0x7f0000000300)=<r6=>0x0)
getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000840)=""/200, &(0x7f0000000340)=0xc8)
perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x4bc, 0xc141, 0x81, 0x7, 0x0, 0xffffffffffff43a5, 0x1000, 0x9, 0x7, 0x400, 0x3e, 0x4, 0x69, 0xfffffffffffffff9, 0x1, 0xd30, 0x6, 0x3, 0x8, 0x200, 0xed, 0x3, 0x7, 0x0, 0x10000, 0xc000, 0x6, 0x8000, 0xfffffffffffffffa, 0x6, 0xba39, 0x5b, 0x7, 0xd, 0x400, 0x5, 0x0, 0x2, 0x5, @perf_config_ext={0xfffffffffffffe01, 0x8}, 0x100, 0x6, 0x6, 0xf, 0x2, 0x9, 0x368}, r2, 0x2, r3, 0x1)
io_cancel(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x423, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x0)
bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
ftruncate(0xffffffffffffffff, 0x2007fff)

01:21:57 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f47725390000000000000000000000000000000000000000000000195e23", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r2}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x01!\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\x00'}})
dup(0xffffffffffffffff)

[  635.831167] IPVS: length: 200 != 24
01:21:57 executing program 1:
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x8000009)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540))
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
capget(&(0x7f00000001c0)={0x20080522, r2}, &(0x7f0000000200)={0x9, 0x81, 0xffffffff, 0x6, 0x3ff, 0x8001})
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = dup(r4)
fsync(r0)
ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, &(0x7f0000000280)={0x6})
ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000240)={&(0x7f0000000740)="eee831c4c55ec237f036e607532e6be515e0ff59eb07ca967784d01655a33a563c297579808c05c2a32773aa52580871a379712644cd3fe309a095938a2699f285daf00f0c5072970a04d508e74dce8d091b9a0d946312e9543ffaf5c41d7507c95443fb0c4d26a2411c4684267a142a2db6dc35d80807e4b29643daa044b555ae0533296509e0fda89f", 0x8a})
ioctl$int_in(r4, 0x5452, &(0x7f0000000580)=0xe2e)
fcntl$lock(r1, 0x7, &(0x7f0000000380)={0x802000001, 0x0, 0x5, 0xffffffff80000000, r2})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='syzkaller1\x00', 0x10)
ptrace$setregset(0x4205, r2, 0x3, 0x0)
io_setup(0x20, &(0x7f0000000300)=<r6=>0x0)
getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000840)=""/200, &(0x7f0000000340)=0xc8)
perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x4bc, 0xc141, 0x81, 0x7, 0x0, 0xffffffffffff43a5, 0x1000, 0x9, 0x7, 0x400, 0x3e, 0x4, 0x69, 0xfffffffffffffff9, 0x1, 0xd30, 0x6, 0x3, 0x8, 0x200, 0xed, 0x3, 0x7, 0x0, 0x10000, 0xc000, 0x6, 0x8000, 0xfffffffffffffffa, 0x6, 0xba39, 0x5b, 0x7, 0xd, 0x400, 0x5, 0x0, 0x2, 0x5, @perf_config_ext={0xfffffffffffffe01, 0x8}, 0x100, 0x6, 0x6, 0xf, 0x2, 0x9, 0x368}, r2, 0x2, r3, 0x1)
io_cancel(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x423, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x0)
bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
ftruncate(0xffffffffffffffff, 0x2007fff)

01:21:57 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x101002, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246)
ioctl$PPPIOCSFLAGS(r0, 0x40047459, 0x0)
r1 = memfd_create(&(0x7f0000000140)='^\x00', 0x0)
readv(r0, 0x0, 0x0)
pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
sendfile(r0, r1, &(0x7f00000ddff8)=0x2, 0x102003f00)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0xf2}, &(0x7f0000000280)=0x8)

01:21:57 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)={'nat\x00'}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000b5c029100000f6f4d1a400650013000008"], 0x1}], 0x1}, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x40, &(0x7f0000000080), 0x1ce)

01:21:57 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f47725390000000000000000000000000000000000000000000000195e23", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r2}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x01!\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\x00'}})
dup(0xffffffffffffffff)

01:21:57 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f47725390000000000000000000000000000000000000000000000195e23", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r2}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x01!\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\x00'}})
dup(0xffffffffffffffff)

01:21:57 executing program 5:
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x8000009)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540))
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
capget(&(0x7f00000001c0)={0x20080522, r2}, &(0x7f0000000200)={0x9, 0x81, 0xffffffff, 0x6, 0x3ff, 0x8001})
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = dup(r4)
fsync(r0)
ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, &(0x7f0000000280)={0x6})
ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000240)={&(0x7f0000000740)="eee831c4c55ec237f036e607532e6be515e0ff59eb07ca967784d01655a33a563c297579808c05c2a32773aa52580871a379712644cd3fe309a095938a2699f285daf00f0c5072970a04d508e74dce8d091b9a0d946312e9543ffaf5c41d7507c95443fb0c4d26a2411c4684267a142a2db6dc35d80807e4b29643daa044b555ae0533296509e0fda89f", 0x8a})
ioctl$int_in(r4, 0x5452, &(0x7f0000000580)=0xe2e)
fcntl$lock(r1, 0x7, &(0x7f0000000380)={0x802000001, 0x0, 0x5, 0xffffffff80000000, r2})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='syzkaller1\x00', 0x10)
ptrace$setregset(0x4205, r2, 0x3, 0x0)
io_setup(0x20, &(0x7f0000000300)=<r6=>0x0)
getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000840)=""/200, &(0x7f0000000340)=0xc8)
perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x4bc, 0xc141, 0x81, 0x7, 0x0, 0xffffffffffff43a5, 0x1000, 0x9, 0x7, 0x400, 0x3e, 0x4, 0x69, 0xfffffffffffffff9, 0x1, 0xd30, 0x6, 0x3, 0x8, 0x200, 0xed, 0x3, 0x7, 0x0, 0x10000, 0xc000, 0x6, 0x8000, 0xfffffffffffffffa, 0x6, 0xba39, 0x5b, 0x7, 0xd, 0x400, 0x5, 0x0, 0x2, 0x5, @perf_config_ext={0xfffffffffffffe01, 0x8}, 0x100, 0x6, 0x6, 0xf, 0x2, 0x9, 0x368}, r2, 0x2, r3, 0x1)
io_cancel(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x423, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x0)
bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
ftruncate(0xffffffffffffffff, 0x2007fff)

01:21:57 executing program 0:
r0 = creat(&(0x7f00000004c0)='./bus\x00', 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0)
sendfile(r0, r1, 0x0, 0x8000fffffffc)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000240))
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000280), &(0x7f0000000300)=0x8)
pipe(&(0x7f0000000300))

[  636.088384] IPVS: length: 200 != 24
01:21:58 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@mpls_delroute={0x1c, 0x19, 0x503, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x5}}, 0x1c}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)

01:21:58 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f47725390000000000000000000000000000000000000000000000195e23", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r2}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x01!\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\x00'}})
dup(0xffffffffffffffff)

[  636.185704] kauditd_printk_skb: 22 callbacks suppressed
[  636.185713] audit: type=1800 audit(1548120117.994:177): pid=26108 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor0" name="bus" dev="sda1" ino=16768 res=0
[  636.198676] IPVS: length: 200 != 24
01:21:58 executing program 5:
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000200), 0x4)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x8, 0x4, @tid=r0}, &(0x7f0000000400))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1}, {0x0, 0x1c9c380}}, 0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0)
read(r1, &(0x7f0000000080)=""/128, 0x88308aa)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)

01:21:58 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54000000005c07"], 0x0}, 0x48)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x20003, 0x0)
getdents64(r1, &(0x7f0000000740)=""/4096, 0x1000)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fadvise64(r0, 0x0, 0x3, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x856, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x3, 0x19)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000200)={0x1, 0xa3, {0x0, 0x0, 0x8, {0x0, 0x80000000}, {0x9}, @rumble={0x89, 0x57e}}, {0x57, 0x3f, 0x2, {0x8, 0x4}, {0x9, 0xffff}, @cond=[{0x7, 0x8, 0x1ff, 0x0, 0xffffffffffff7fff}, {0xd2, 0x6, 0x1, 0x4, 0x1000, 0x1}]}})
shutdown(r4, 0x1)
setuid(r2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r5, 0x5404, 0x0)
ioctl$KDGKBLED(r5, 0xc0045405, &(0x7f00000000c0))
setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000280)={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8)

01:21:58 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x101002, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246)
ioctl$PPPIOCSFLAGS(r0, 0x40047459, 0x0)
r1 = memfd_create(&(0x7f0000000140)='^\x00', 0x0)
readv(r0, 0x0, 0x0)
pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
sendfile(r0, r1, &(0x7f00000ddff8)=0x2, 0x102003f00)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0xf2}, &(0x7f0000000280)=0x8)

01:21:58 executing program 1:
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x8000009)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540))
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
capget(&(0x7f00000001c0)={0x20080522, r2}, &(0x7f0000000200)={0x9, 0x81, 0xffffffff, 0x6, 0x3ff, 0x8001})
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = dup(r4)
fsync(r0)
ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, &(0x7f0000000280)={0x6})
ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000240)={&(0x7f0000000740)="eee831c4c55ec237f036e607532e6be515e0ff59eb07ca967784d01655a33a563c297579808c05c2a32773aa52580871a379712644cd3fe309a095938a2699f285daf00f0c5072970a04d508e74dce8d091b9a0d946312e9543ffaf5c41d7507c95443fb0c4d26a2411c4684267a142a2db6dc35d80807e4b29643daa044b555ae0533296509e0fda89f", 0x8a})
ioctl$int_in(r4, 0x5452, &(0x7f0000000580)=0xe2e)
fcntl$lock(r1, 0x7, &(0x7f0000000380)={0x802000001, 0x0, 0x5, 0xffffffff80000000, r2})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='syzkaller1\x00', 0x10)
ptrace$setregset(0x4205, r2, 0x3, 0x0)
io_setup(0x20, &(0x7f0000000300)=<r6=>0x0)
getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000840)=""/200, &(0x7f0000000340)=0xc8)
perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x4bc, 0xc141, 0x81, 0x7, 0x0, 0xffffffffffff43a5, 0x1000, 0x9, 0x7, 0x400, 0x3e, 0x4, 0x69, 0xfffffffffffffff9, 0x1, 0xd30, 0x6, 0x3, 0x8, 0x200, 0xed, 0x3, 0x7, 0x0, 0x10000, 0xc000, 0x6, 0x8000, 0xfffffffffffffffa, 0x6, 0xba39, 0x5b, 0x7, 0xd, 0x400, 0x5, 0x0, 0x2, 0x5, @perf_config_ext={0xfffffffffffffe01, 0x8}, 0x100, 0x6, 0x6, 0xf, 0x2, 0x9, 0x368}, r2, 0x2, r3, 0x1)
io_cancel(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x423, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x0)
bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
ftruncate(0xffffffffffffffff, 0x2007fff)

01:21:58 executing program 5:
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000200), 0x4)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x8, 0x4, @tid=r0}, &(0x7f0000000400))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1}, {0x0, 0x1c9c380}}, 0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0)
read(r1, &(0x7f0000000080)=""/128, 0x88308aa)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)

01:21:58 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@mpls_delroute={0x1c, 0x19, 0x503, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x5}}, 0x1c}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)

01:21:58 executing program 5:
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000200), 0x4)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x8, 0x4, @tid=r0}, &(0x7f0000000400))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1}, {0x0, 0x1c9c380}}, 0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0)
read(r1, &(0x7f0000000080)=""/128, 0x88308aa)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)

[  636.928170] IPVS: length: 200 != 24
01:21:58 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54000000005c07"], 0x0}, 0x48)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x20003, 0x0)
getdents64(r1, &(0x7f0000000740)=""/4096, 0x1000)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fadvise64(r0, 0x0, 0x3, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x856, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x3, 0x19)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000200)={0x1, 0xa3, {0x0, 0x0, 0x8, {0x0, 0x80000000}, {0x9}, @rumble={0x89, 0x57e}}, {0x57, 0x3f, 0x2, {0x8, 0x4}, {0x9, 0xffff}, @cond=[{0x7, 0x8, 0x1ff, 0x0, 0xffffffffffff7fff}, {0xd2, 0x6, 0x1, 0x4, 0x1000, 0x1}]}})
shutdown(r4, 0x1)
setuid(r2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r5, 0x5404, 0x0)
ioctl$KDGKBLED(r5, 0xc0045405, &(0x7f00000000c0))
setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000280)={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8)

[  636.998964] audit: type=1800 audit(1548120118.814:178): pid=26113 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor0" name="bus" dev="sda1" ino=16768 res=0
01:21:58 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54000000005c07"], 0x0}, 0x48)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x20003, 0x0)
getdents64(r1, &(0x7f0000000740)=""/4096, 0x1000)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fadvise64(r0, 0x0, 0x3, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x856, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x3, 0x19)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000200)={0x1, 0xa3, {0x0, 0x0, 0x8, {0x0, 0x80000000}, {0x9}, @rumble={0x89, 0x57e}}, {0x57, 0x3f, 0x2, {0x8, 0x4}, {0x9, 0xffff}, @cond=[{0x7, 0x8, 0x1ff, 0x0, 0xffffffffffff7fff}, {0xd2, 0x6, 0x1, 0x4, 0x1000, 0x1}]}})
shutdown(r4, 0x1)
setuid(r2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r5, 0x5404, 0x0)
ioctl$KDGKBLED(r5, 0xc0045405, &(0x7f00000000c0))
setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000280)={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8)

01:21:59 executing program 1:
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x8000009)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540))
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
capget(&(0x7f00000001c0)={0x20080522, r2}, &(0x7f0000000200)={0x9, 0x81, 0xffffffff, 0x6, 0x3ff, 0x8001})
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = dup(r4)
fsync(r0)
ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, &(0x7f0000000280)={0x6})
ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000240)={&(0x7f0000000740)="eee831c4c55ec237f036e607532e6be515e0ff59eb07ca967784d01655a33a563c297579808c05c2a32773aa52580871a379712644cd3fe309a095938a2699f285daf00f0c5072970a04d508e74dce8d091b9a0d946312e9543ffaf5c41d7507c95443fb0c4d26a2411c4684267a142a2db6dc35d80807e4b29643daa044b555ae0533296509e0fda89f", 0x8a})
ioctl$int_in(r4, 0x5452, &(0x7f0000000580)=0xe2e)
fcntl$lock(r1, 0x7, &(0x7f0000000380)={0x802000001, 0x0, 0x5, 0xffffffff80000000, r2})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='syzkaller1\x00', 0x10)
ptrace$setregset(0x4205, r2, 0x3, 0x0)
io_setup(0x20, &(0x7f0000000300)=<r6=>0x0)
getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000840)=""/200, &(0x7f0000000340)=0xc8)
perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x4bc, 0xc141, 0x81, 0x7, 0x0, 0xffffffffffff43a5, 0x1000, 0x9, 0x7, 0x400, 0x3e, 0x4, 0x69, 0xfffffffffffffff9, 0x1, 0xd30, 0x6, 0x3, 0x8, 0x200, 0xed, 0x3, 0x7, 0x0, 0x10000, 0xc000, 0x6, 0x8000, 0xfffffffffffffffa, 0x6, 0xba39, 0x5b, 0x7, 0xd, 0x400, 0x5, 0x0, 0x2, 0x5, @perf_config_ext={0xfffffffffffffe01, 0x8}, 0x100, 0x6, 0x6, 0xf, 0x2, 0x9, 0x368}, r2, 0x2, r3, 0x1)
io_cancel(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x423, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x0)
bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
ftruncate(0xffffffffffffffff, 0x2007fff)

01:21:59 executing program 0:
r0 = creat(&(0x7f00000004c0)='./bus\x00', 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0)
sendfile(r0, r1, 0x0, 0x8000fffffffc)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000240))
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000280), &(0x7f0000000300)=0x8)
pipe(&(0x7f0000000300))

01:21:59 executing program 5:
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000200), 0x4)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x8, 0x4, @tid=r0}, &(0x7f0000000400))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1}, {0x0, 0x1c9c380}}, 0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0)
read(r1, &(0x7f0000000080)=""/128, 0x88308aa)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)

01:21:59 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54000000005c07"], 0x0}, 0x48)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x20003, 0x0)
getdents64(r1, &(0x7f0000000740)=""/4096, 0x1000)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fadvise64(r0, 0x0, 0x3, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x856, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x3, 0x19)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000200)={0x1, 0xa3, {0x0, 0x0, 0x8, {0x0, 0x80000000}, {0x9}, @rumble={0x89, 0x57e}}, {0x57, 0x3f, 0x2, {0x8, 0x4}, {0x9, 0xffff}, @cond=[{0x7, 0x8, 0x1ff, 0x0, 0xffffffffffff7fff}, {0xd2, 0x6, 0x1, 0x4, 0x1000, 0x1}]}})
shutdown(r4, 0x1)
setuid(r2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r5, 0x5404, 0x0)
ioctl$KDGKBLED(r5, 0xc0045405, &(0x7f00000000c0))
setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000280)={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8)

[  637.386070] IPVS: length: 200 != 24
01:21:59 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54000000005c07"], 0x0}, 0x48)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x20003, 0x0)
getdents64(r1, &(0x7f0000000740)=""/4096, 0x1000)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fadvise64(r0, 0x0, 0x3, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x856, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x3, 0x19)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000200)={0x1, 0xa3, {0x0, 0x0, 0x8, {0x0, 0x80000000}, {0x9}, @rumble={0x89, 0x57e}}, {0x57, 0x3f, 0x2, {0x8, 0x4}, {0x9, 0xffff}, @cond=[{0x7, 0x8, 0x1ff, 0x0, 0xffffffffffff7fff}, {0xd2, 0x6, 0x1, 0x4, 0x1000, 0x1}]}})
shutdown(r4, 0x1)
setuid(r2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r5, 0x5404, 0x0)
ioctl$KDGKBLED(r5, 0xc0045405, &(0x7f00000000c0))
setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000280)={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8)

[  637.429782] audit: type=1800 audit(1548120119.244:179): pid=26160 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor0" name="bus" dev="sda1" ino=16776 res=0
01:21:59 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@mpls_delroute={0x1c, 0x19, 0x503, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x5}}, 0x1c}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)

01:21:59 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54000000005c07"], 0x0}, 0x48)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x20003, 0x0)
getdents64(r1, &(0x7f0000000740)=""/4096, 0x1000)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fadvise64(r0, 0x0, 0x3, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x856, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x3, 0x19)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000200)={0x1, 0xa3, {0x0, 0x0, 0x8, {0x0, 0x80000000}, {0x9}, @rumble={0x89, 0x57e}}, {0x57, 0x3f, 0x2, {0x8, 0x4}, {0x9, 0xffff}, @cond=[{0x7, 0x8, 0x1ff, 0x0, 0xffffffffffff7fff}, {0xd2, 0x6, 0x1, 0x4, 0x1000, 0x1}]}})
shutdown(r4, 0x1)
setuid(r2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r5, 0x5404, 0x0)
ioctl$KDGKBLED(r5, 0xc0045405, &(0x7f00000000c0))
setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000280)={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8)

01:21:59 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54000000005c07"], 0x0}, 0x48)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x20003, 0x0)
getdents64(r1, &(0x7f0000000740)=""/4096, 0x1000)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fadvise64(r0, 0x0, 0x3, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x856, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x3, 0x19)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000200)={0x1, 0xa3, {0x0, 0x0, 0x8, {0x0, 0x80000000}, {0x9}, @rumble={0x89, 0x57e}}, {0x57, 0x3f, 0x2, {0x8, 0x4}, {0x9, 0xffff}, @cond=[{0x7, 0x8, 0x1ff, 0x0, 0xffffffffffff7fff}, {0xd2, 0x6, 0x1, 0x4, 0x1000, 0x1}]}})
shutdown(r4, 0x1)
setuid(r2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r5, 0x5404, 0x0)
ioctl$KDGKBLED(r5, 0xc0045405, &(0x7f00000000c0))
setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000280)={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8)

01:21:59 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54000000005c07"], 0x0}, 0x48)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x20003, 0x0)
getdents64(r1, &(0x7f0000000740)=""/4096, 0x1000)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fadvise64(r0, 0x0, 0x3, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x856, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x3, 0x19)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000200)={0x1, 0xa3, {0x0, 0x0, 0x8, {0x0, 0x80000000}, {0x9}, @rumble={0x89, 0x57e}}, {0x57, 0x3f, 0x2, {0x8, 0x4}, {0x9, 0xffff}, @cond=[{0x7, 0x8, 0x1ff, 0x0, 0xffffffffffff7fff}, {0xd2, 0x6, 0x1, 0x4, 0x1000, 0x1}]}})
shutdown(r4, 0x1)
setuid(r2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r5, 0x5404, 0x0)
ioctl$KDGKBLED(r5, 0xc0045405, &(0x7f00000000c0))
setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000280)={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8)

01:21:59 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54000000005c07"], 0x0}, 0x48)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x20003, 0x0)
getdents64(r1, &(0x7f0000000740)=""/4096, 0x1000)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fadvise64(r0, 0x0, 0x3, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x856, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x3, 0x19)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000200)={0x1, 0xa3, {0x0, 0x0, 0x8, {0x0, 0x80000000}, {0x9}, @rumble={0x89, 0x57e}}, {0x57, 0x3f, 0x2, {0x8, 0x4}, {0x9, 0xffff}, @cond=[{0x7, 0x8, 0x1ff, 0x0, 0xffffffffffff7fff}, {0xd2, 0x6, 0x1, 0x4, 0x1000, 0x1}]}})
shutdown(r4, 0x1)
setuid(r2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r5, 0x5404, 0x0)
ioctl$KDGKBLED(r5, 0xc0045405, &(0x7f00000000c0))
setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000280)={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8)

01:21:59 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54000000005c07"], 0x0}, 0x48)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x20003, 0x0)
getdents64(r1, &(0x7f0000000740)=""/4096, 0x1000)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fadvise64(r0, 0x0, 0x3, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x856, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x3, 0x19)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000200)={0x1, 0xa3, {0x0, 0x0, 0x8, {0x0, 0x80000000}, {0x9}, @rumble={0x89, 0x57e}}, {0x57, 0x3f, 0x2, {0x8, 0x4}, {0x9, 0xffff}, @cond=[{0x7, 0x8, 0x1ff, 0x0, 0xffffffffffff7fff}, {0xd2, 0x6, 0x1, 0x4, 0x1000, 0x1}]}})
shutdown(r4, 0x1)
setuid(r2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r5, 0x5404, 0x0)
ioctl$KDGKBLED(r5, 0xc0045405, &(0x7f00000000c0))
setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000280)={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8)

01:22:00 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54000000005c07"], 0x0}, 0x48)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x20003, 0x0)
getdents64(r1, &(0x7f0000000740)=""/4096, 0x1000)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fadvise64(r0, 0x0, 0x3, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x856, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x3, 0x19)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000200)={0x1, 0xa3, {0x0, 0x0, 0x8, {0x0, 0x80000000}, {0x9}, @rumble={0x89, 0x57e}}, {0x57, 0x3f, 0x2, {0x8, 0x4}, {0x9, 0xffff}, @cond=[{0x7, 0x8, 0x1ff, 0x0, 0xffffffffffff7fff}, {0xd2, 0x6, 0x1, 0x4, 0x1000, 0x1}]}})
shutdown(r4, 0x1)
setuid(r2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r5, 0x5404, 0x0)
ioctl$KDGKBLED(r5, 0xc0045405, &(0x7f00000000c0))
setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000280)={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8)

01:22:00 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54000000005c07"], 0x0}, 0x48)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x20003, 0x0)
getdents64(r1, &(0x7f0000000740)=""/4096, 0x1000)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fadvise64(r0, 0x0, 0x3, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x856, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x3, 0x19)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000200)={0x1, 0xa3, {0x0, 0x0, 0x8, {0x0, 0x80000000}, {0x9}, @rumble={0x89, 0x57e}}, {0x57, 0x3f, 0x2, {0x8, 0x4}, {0x9, 0xffff}, @cond=[{0x7, 0x8, 0x1ff, 0x0, 0xffffffffffff7fff}, {0xd2, 0x6, 0x1, 0x4, 0x1000, 0x1}]}})
shutdown(r4, 0x1)
setuid(r2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r5, 0x5404, 0x0)
ioctl$KDGKBLED(r5, 0xc0045405, &(0x7f00000000c0))
setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000280)={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8)

01:22:00 executing program 0:
r0 = creat(&(0x7f00000004c0)='./bus\x00', 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0)
sendfile(r0, r1, 0x0, 0x8000fffffffc)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000240))
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000280), &(0x7f0000000300)=0x8)
pipe(&(0x7f0000000300))

01:22:00 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54000000005c07"], 0x0}, 0x48)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x20003, 0x0)
getdents64(r1, &(0x7f0000000740)=""/4096, 0x1000)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fadvise64(r0, 0x0, 0x3, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x856, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x3, 0x19)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000200)={0x1, 0xa3, {0x0, 0x0, 0x8, {0x0, 0x80000000}, {0x9}, @rumble={0x89, 0x57e}}, {0x57, 0x3f, 0x2, {0x8, 0x4}, {0x9, 0xffff}, @cond=[{0x7, 0x8, 0x1ff, 0x0, 0xffffffffffff7fff}, {0xd2, 0x6, 0x1, 0x4, 0x1000, 0x1}]}})
shutdown(r4, 0x1)
setuid(r2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r5, 0x5404, 0x0)
ioctl$KDGKBLED(r5, 0xc0045405, &(0x7f00000000c0))
setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000280)={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8)

01:22:00 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@mpls_delroute={0x1c, 0x19, 0x503, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x5}}, 0x1c}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)

01:22:00 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54000000005c07"], 0x0}, 0x48)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x20003, 0x0)
getdents64(r1, &(0x7f0000000740)=""/4096, 0x1000)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fadvise64(r0, 0x0, 0x3, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x856, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x3, 0x19)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000200)={0x1, 0xa3, {0x0, 0x0, 0x8, {0x0, 0x80000000}, {0x9}, @rumble={0x89, 0x57e}}, {0x57, 0x3f, 0x2, {0x8, 0x4}, {0x9, 0xffff}, @cond=[{0x7, 0x8, 0x1ff, 0x0, 0xffffffffffff7fff}, {0xd2, 0x6, 0x1, 0x4, 0x1000, 0x1}]}})
shutdown(r4, 0x1)
setuid(r2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r5, 0x5404, 0x0)
ioctl$KDGKBLED(r5, 0xc0045405, &(0x7f00000000c0))
setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000280)={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8)

01:22:00 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54000000005c07"], 0x0}, 0x48)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x20003, 0x0)
getdents64(r1, &(0x7f0000000740)=""/4096, 0x1000)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fadvise64(r0, 0x0, 0x3, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x856, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x3, 0x19)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000200)={0x1, 0xa3, {0x0, 0x0, 0x8, {0x0, 0x80000000}, {0x9}, @rumble={0x89, 0x57e}}, {0x57, 0x3f, 0x2, {0x8, 0x4}, {0x9, 0xffff}, @cond=[{0x7, 0x8, 0x1ff, 0x0, 0xffffffffffff7fff}, {0xd2, 0x6, 0x1, 0x4, 0x1000, 0x1}]}})
shutdown(r4, 0x1)
setuid(r2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r5, 0x5404, 0x0)
ioctl$KDGKBLED(r5, 0xc0045405, &(0x7f00000000c0))
setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000280)={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8)

01:22:00 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54000000005c07"], 0x0}, 0x48)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x20003, 0x0)
getdents64(r1, &(0x7f0000000740)=""/4096, 0x1000)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fadvise64(r0, 0x0, 0x3, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x856, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x3, 0x19)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000200)={0x1, 0xa3, {0x0, 0x0, 0x8, {0x0, 0x80000000}, {0x9}, @rumble={0x89, 0x57e}}, {0x57, 0x3f, 0x2, {0x8, 0x4}, {0x9, 0xffff}, @cond=[{0x7, 0x8, 0x1ff, 0x0, 0xffffffffffff7fff}, {0xd2, 0x6, 0x1, 0x4, 0x1000, 0x1}]}})
shutdown(r4, 0x1)
setuid(r2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r5, 0x5404, 0x0)
ioctl$KDGKBLED(r5, 0xc0045405, &(0x7f00000000c0))
setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000280)={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8)

[  638.536050] audit: type=1800 audit(1548120120.344:180): pid=26203 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor0" name="bus" dev="sda1" ino=16776 res=0
01:22:00 executing program 0:
r0 = creat(&(0x7f00000004c0)='./bus\x00', 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0)
sendfile(r0, r1, 0x0, 0x8000fffffffc)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000240))
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000280), &(0x7f0000000300)=0x8)
pipe(&(0x7f0000000300))

01:22:00 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54000000005c07"], 0x0}, 0x48)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x20003, 0x0)
getdents64(r1, &(0x7f0000000740)=""/4096, 0x1000)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fadvise64(r0, 0x0, 0x3, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x856, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x3, 0x19)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000200)={0x1, 0xa3, {0x0, 0x0, 0x8, {0x0, 0x80000000}, {0x9}, @rumble={0x89, 0x57e}}, {0x57, 0x3f, 0x2, {0x8, 0x4}, {0x9, 0xffff}, @cond=[{0x7, 0x8, 0x1ff, 0x0, 0xffffffffffff7fff}, {0xd2, 0x6, 0x1, 0x4, 0x1000, 0x1}]}})
shutdown(r4, 0x1)
setuid(r2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r5, 0x5404, 0x0)
ioctl$KDGKBLED(r5, 0xc0045405, &(0x7f00000000c0))
setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000280)={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8)

01:22:00 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54000000005c07"], 0x0}, 0x48)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x20003, 0x0)
getdents64(r1, &(0x7f0000000740)=""/4096, 0x1000)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fadvise64(r0, 0x0, 0x3, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x856, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x3, 0x19)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000200)={0x1, 0xa3, {0x0, 0x0, 0x8, {0x0, 0x80000000}, {0x9}, @rumble={0x89, 0x57e}}, {0x57, 0x3f, 0x2, {0x8, 0x4}, {0x9, 0xffff}, @cond=[{0x7, 0x8, 0x1ff, 0x0, 0xffffffffffff7fff}, {0xd2, 0x6, 0x1, 0x4, 0x1000, 0x1}]}})
shutdown(r4, 0x1)
setuid(r2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r5, 0x5404, 0x0)
ioctl$KDGKBLED(r5, 0xc0045405, &(0x7f00000000c0))
setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000280)={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8)

[  638.831063] audit: type=1800 audit(1548120120.644:181): pid=26220 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor0" name="bus" dev="sda1" ino=16776 res=0
01:22:00 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7641bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a73987a938fdedfce7bbba4fec2d8a09c41fb23326079ec15ef2818a17900"}, 0xd8)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x80fd000000000000, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

01:22:00 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54000000005c07"], 0x0}, 0x48)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x20003, 0x0)
getdents64(r1, &(0x7f0000000740)=""/4096, 0x1000)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fadvise64(r0, 0x0, 0x3, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x856, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x3, 0x19)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000200)={0x1, 0xa3, {0x0, 0x0, 0x8, {0x0, 0x80000000}, {0x9}, @rumble={0x89, 0x57e}}, {0x57, 0x3f, 0x2, {0x8, 0x4}, {0x9, 0xffff}, @cond=[{0x7, 0x8, 0x1ff, 0x0, 0xffffffffffff7fff}, {0xd2, 0x6, 0x1, 0x4, 0x1000, 0x1}]}})
shutdown(r4, 0x1)
setuid(r2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r5, 0x5404, 0x0)
ioctl$KDGKBLED(r5, 0xc0045405, &(0x7f00000000c0))
setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000280)={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8)

01:22:00 executing program 4:
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
sendto$llc(r0, 0x0, 0xffffffffffffff44, 0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="b06de07ad55b"}, 0x10)

01:22:00 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54000000005c07"], 0x0}, 0x48)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x20003, 0x0)
getdents64(r1, &(0x7f0000000740)=""/4096, 0x1000)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fadvise64(r0, 0x0, 0x3, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x856, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x3, 0x19)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000200)={0x1, 0xa3, {0x0, 0x0, 0x8, {0x0, 0x80000000}, {0x9}, @rumble={0x89, 0x57e}}, {0x57, 0x3f, 0x2, {0x8, 0x4}, {0x9, 0xffff}, @cond=[{0x7, 0x8, 0x1ff, 0x0, 0xffffffffffff7fff}, {0xd2, 0x6, 0x1, 0x4, 0x1000, 0x1}]}})
shutdown(r4, 0x1)
setuid(r2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r5, 0x5404, 0x0)
ioctl$KDGKBLED(r5, 0xc0045405, &(0x7f00000000c0))
setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000280)={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8)

01:22:01 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54000000005c07"], 0x0}, 0x48)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x20003, 0x0)
getdents64(r1, &(0x7f0000000740)=""/4096, 0x1000)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fadvise64(r0, 0x0, 0x3, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x856, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x3, 0x19)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000200)={0x1, 0xa3, {0x0, 0x0, 0x8, {0x0, 0x80000000}, {0x9}, @rumble={0x89, 0x57e}}, {0x57, 0x3f, 0x2, {0x8, 0x4}, {0x9, 0xffff}, @cond=[{0x7, 0x8, 0x1ff, 0x0, 0xffffffffffff7fff}, {0xd2, 0x6, 0x1, 0x4, 0x1000, 0x1}]}})
shutdown(r4, 0x1)
setuid(r2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r5, 0x5404, 0x0)
ioctl$KDGKBLED(r5, 0xc0045405, &(0x7f00000000c0))
setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000280)={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8)

01:22:01 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/packet\x00')
setsockopt$inet_tcp_int(r0, 0x6, 0x3, 0x0, 0xfffffffffffffece)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x180200004, 0x0)
ioctl$TCSETAF(r1, 0x5404, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f00000001c0)={{0x40, 0x3}, 'port0\x00', 0x9, 0x100015, 0x8, 0x8, 0x6, 0xfffffffffffffffa, 0x16bf, 0x0, 0x2, 0x2})
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x80000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000300)={@mcast1, 0x42, r5})
r6 = syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x400, 0x0)
write$P9_RLERROR(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x26f)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000280)={@mcast1}, &(0x7f00000002c0)=0x14)
mkdir(&(0x7f0000000340)='./file1\x00', 0x11)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x8000100042, 0x2b0)
accept4(0xffffffffffffffff, &(0x7f0000000000)=@ax25, &(0x7f00000005c0)=0x80, 0x880000)
r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
accept4$alg(r1, 0x0, 0x0, 0x800)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x10000000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$llc(r7, &(0x7f0000000380)={0x1a, 0x1, 0x5, 0x5, 0xc93, 0x8, @link_local}, 0x10)
sendmmsg(r7, &(0x7f0000001380), 0x3fffff1, 0x40)
r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0)

01:22:01 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0x4020565a, &(0x7f0000000600)={0x0, 0x0, "ace8f564057ef7ec98cb5e9d4f9fbbab64935e2f689f8f77d1a8b96d2a8c4097"})

01:22:01 executing program 3:
r0 = socket$inet(0x2, 0x1000000003, 0x88)
sendmmsg(r0, &(0x7f0000006780)=[{{&(0x7f0000000340)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000940)}}, {{&(0x7f0000000080)=@in, 0x80, &(0x7f0000000000)=[{&(0x7f0000000000)="990db42d", 0x4}], 0x1}}], 0x2, 0xc0c0)

01:22:01 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54000000005c07"], 0x0}, 0x48)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x20003, 0x0)
getdents64(r1, &(0x7f0000000740)=""/4096, 0x1000)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fadvise64(r0, 0x0, 0x3, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x856, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x3, 0x19)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000200)={0x1, 0xa3, {0x0, 0x0, 0x8, {0x0, 0x80000000}, {0x9}, @rumble={0x89, 0x57e}}, {0x57, 0x3f, 0x2, {0x8, 0x4}, {0x9, 0xffff}, @cond=[{0x7, 0x8, 0x1ff, 0x0, 0xffffffffffff7fff}, {0xd2, 0x6, 0x1, 0x4, 0x1000, 0x1}]}})
shutdown(r4, 0x1)
setuid(r2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r5, 0x5404, 0x0)
ioctl$KDGKBLED(r5, 0xc0045405, &(0x7f00000000c0))
setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000280)={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8)

01:22:01 executing program 0:
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
clone(0x800002502000ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000040)=@nullb='[d::]:6640:/', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

01:22:01 executing program 2:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$ndb(&(0x7f0000000480)='/dev/nbd#\x00', 0xffffffffffffffff, 0x2000)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
socket$alg(0x26, 0x5, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f00000000c0)={0xffff})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000080)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000000, 0x3f00000000000000, 0x0, 0xfffffffe, 0x1107, 0x2000000, 0x0, 0x1000000000000, 0x0, 0x6]}, 0x3})
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x5, 0x500})
r1 = syz_open_dev$usbmon(&(0x7f0000000700)='/dev/usbmon#\x00', 0x0, 0x0)
poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x2000b, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'})
ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8]})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0))
openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0)
ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000800)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002eba4dd466bf8b4ac1fd7837039b702b9d0fa204a7b5df87c3de67d40844e3ddd3c120aee61")
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x14003d, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00')
sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB="000028bd7000fddbdf25020000000800000000000076010001004e23000041d6fd4a2599fb353cd4540210ff73921dde29a6d8bd2262ced844204eca2d190dc5fa4fe82e3e933c348e66d59b1bc76eabf043b3625bc92ea850edd24b465d1f3b4b2df960f26e7d8dd1ea70db1a52eace479d7d8731d5332acafcbcd6ee"], 0x1}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x121102, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0)

01:22:01 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffd, 0x400000000031, 0xffffffffffffffff, 0x0)
setsockopt$packet_fanout_data(r0, 0x107, 0x7, &(0x7f00000000c0)={0x2259, &(0x7f0000000040)}, 0x4)

01:22:01 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7641bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a73987a938fdedfce7bbba4fec2d8a09c41fb23326079ec15ef2818a17900"}, 0xd8)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x80fd000000000000, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

01:22:01 executing program 0:
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
clone(0x800002502000ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000040)=@nullb='[d::]:6640:/', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

01:22:01 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/packet\x00')
setsockopt$inet_tcp_int(r0, 0x6, 0x3, 0x0, 0xfffffffffffffece)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x180200004, 0x0)
ioctl$TCSETAF(r1, 0x5404, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f00000001c0)={{0x40, 0x3}, 'port0\x00', 0x9, 0x100015, 0x8, 0x8, 0x6, 0xfffffffffffffffa, 0x16bf, 0x0, 0x2, 0x2})
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x80000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000300)={@mcast1, 0x42, r5})
r6 = syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x400, 0x0)
write$P9_RLERROR(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x26f)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000280)={@mcast1}, &(0x7f00000002c0)=0x14)
mkdir(&(0x7f0000000340)='./file1\x00', 0x11)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x8000100042, 0x2b0)
accept4(0xffffffffffffffff, &(0x7f0000000000)=@ax25, &(0x7f00000005c0)=0x80, 0x880000)
r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
accept4$alg(r1, 0x0, 0x0, 0x800)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x10000000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$llc(r7, &(0x7f0000000380)={0x1a, 0x1, 0x5, 0x5, 0xc93, 0x8, @link_local}, 0x10)
sendmmsg(r7, &(0x7f0000001380), 0x3fffff1, 0x40)
r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0)

[  639.927621] libceph: connect [d::]:6640 error -101
[  639.933344] libceph: mon0 [d::]:6640 connect error
[  639.946234] net_ratelimit: 3 callbacks suppressed
[  639.946241] protocol 88fb is buggy, dev hsr_slave_0
[  639.956433] protocol 88fb is buggy, dev hsr_slave_1
[  639.961673] protocol 88fb is buggy, dev hsr_slave_0
[  639.966868] protocol 88fb is buggy, dev hsr_slave_1
[  639.972009] protocol 88fb is buggy, dev hsr_slave_0
[  639.977275] protocol 88fb is buggy, dev hsr_slave_1
01:22:01 executing program 0:
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
clone(0x800002502000ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000040)=@nullb='[d::]:6640:/', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  640.082778] bond0: Releasing backup interface bond_slave_1
[  640.438272] libceph: connect [d::]:6640 error -101
[  640.445988] libceph: mon0 [d::]:6640 connect error
01:22:02 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/packet\x00')
setsockopt$inet_tcp_int(r0, 0x6, 0x3, 0x0, 0xfffffffffffffece)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x180200004, 0x0)
ioctl$TCSETAF(r1, 0x5404, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f00000001c0)={{0x40, 0x3}, 'port0\x00', 0x9, 0x100015, 0x8, 0x8, 0x6, 0xfffffffffffffffa, 0x16bf, 0x0, 0x2, 0x2})
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x80000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000300)={@mcast1, 0x42, r5})
r6 = syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x400, 0x0)
write$P9_RLERROR(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x26f)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000280)={@mcast1}, &(0x7f00000002c0)=0x14)
mkdir(&(0x7f0000000340)='./file1\x00', 0x11)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x8000100042, 0x2b0)
accept4(0xffffffffffffffff, &(0x7f0000000000)=@ax25, &(0x7f00000005c0)=0x80, 0x880000)
r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
accept4$alg(r1, 0x0, 0x0, 0x800)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x10000000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$llc(r7, &(0x7f0000000380)={0x1a, 0x1, 0x5, 0x5, 0xc93, 0x8, @link_local}, 0x10)
sendmmsg(r7, &(0x7f0000001380), 0x3fffff1, 0x40)
r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0)

01:22:02 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7641bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a73987a938fdedfce7bbba4fec2d8a09c41fb23326079ec15ef2818a17900"}, 0xd8)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x80fd000000000000, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

01:22:02 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/packet\x00')
setsockopt$inet_tcp_int(r0, 0x6, 0x3, 0x0, 0xfffffffffffffece)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x180200004, 0x0)
ioctl$TCSETAF(r1, 0x5404, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f00000001c0)={{0x40, 0x3}, 'port0\x00', 0x9, 0x100015, 0x8, 0x8, 0x6, 0xfffffffffffffffa, 0x16bf, 0x0, 0x2, 0x2})
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x80000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000300)={@mcast1, 0x42, r5})
r6 = syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x400, 0x0)
write$P9_RLERROR(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x26f)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000280)={@mcast1}, &(0x7f00000002c0)=0x14)
mkdir(&(0x7f0000000340)='./file1\x00', 0x11)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x8000100042, 0x2b0)
accept4(0xffffffffffffffff, &(0x7f0000000000)=@ax25, &(0x7f00000005c0)=0x80, 0x880000)
r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
accept4$alg(r1, 0x0, 0x0, 0x800)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x10000000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$llc(r7, &(0x7f0000000380)={0x1a, 0x1, 0x5, 0x5, 0xc93, 0x8, @link_local}, 0x10)
sendmmsg(r7, &(0x7f0000001380), 0x3fffff1, 0x40)
r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0)

01:22:03 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/packet\x00')
setsockopt$inet_tcp_int(r0, 0x6, 0x3, 0x0, 0xfffffffffffffece)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x180200004, 0x0)
ioctl$TCSETAF(r1, 0x5404, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f00000001c0)={{0x40, 0x3}, 'port0\x00', 0x9, 0x100015, 0x8, 0x8, 0x6, 0xfffffffffffffffa, 0x16bf, 0x0, 0x2, 0x2})
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x80000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000300)={@mcast1, 0x42, r5})
r6 = syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x400, 0x0)
write$P9_RLERROR(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x26f)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000280)={@mcast1}, &(0x7f00000002c0)=0x14)
mkdir(&(0x7f0000000340)='./file1\x00', 0x11)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x8000100042, 0x2b0)
accept4(0xffffffffffffffff, &(0x7f0000000000)=@ax25, &(0x7f00000005c0)=0x80, 0x880000)
r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
accept4$alg(r1, 0x0, 0x0, 0x800)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x10000000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$llc(r7, &(0x7f0000000380)={0x1a, 0x1, 0x5, 0x5, 0xc93, 0x8, @link_local}, 0x10)
sendmmsg(r7, &(0x7f0000001380), 0x3fffff1, 0x40)
r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0)

[  641.467589] libceph: connect [d::]:6640 error -101
[  641.473345] libceph: mon0 [d::]:6640 connect error
01:22:04 executing program 3:
prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000696000/0x1000)=nil)
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)
write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x2fc)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000200)=0xfb8, 0x9)
splice(r0, 0x0, r1, 0x0, 0x10003, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x6)
fdatasync(r4)
socket$inet6(0xa, 0x1000000000002, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="000000004000000254e72d5d345018a35e678fdf2fd40a37d61c0c7e000000000000002076e40e80c33a05657c326daf421a7846819748fd98a87ec6994b620253b36303bbb6f158108b9ac8871a9c317dae9af28cf5631f661ef5b03b67e6cdd6ba00b7beb2ad76c1c50aa5f6156010ce7d466fe577a6"], 0x1}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00')
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in=@dev, @in6}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000700)=0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0)
r5 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040))
r6 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r5, 0x6)
setsockopt(r6, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r6, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
r7 = accept(r5, 0x0, &(0x7f0000000080)=0xfe0f)
sendmsg$alg(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)="3cf5048e7163ea27da961b58abc6fdd726a3e3c95cad1de31c363355c8e1713e51fe7f59651cc3ac45abe4d057f5137c675ed1994a77351dee893cd34df281c9a23f002a9478039ed67f7b156245f27916f826813ec250d85c0192c16f21dd81efe95b0b969ce99dbf198ee2555098027269016440658583e3662d46fe23e2f3d45c0bc9e61731c225d30af8b12b7608313d88f7a0bdcc6fbdb3c103d6c7ecb56197a96d2c5bdeb8105bab16f495a2016c4eac846d256f43ecfe3604edd6e6c3166a78125ac00878f6e74eebf28e9f31e2eea3ae45c16456ddee6203708bad5a11d90a06dad500942c3c7de6c7e2e6ea754ffce452d745214d4e010f4be714a9ece73e14d28ed7cf52fcebaf48deff2638488d1eddcbdc9aea0d5750bc0b88a8ee86f08747e8817fd62d0c5dccd4006c529949725bbfcca2686601f5d220eb6312ee9b5a4550ad2b7e635cc741cf3981965a252825924fd94f0f0f187653512e74217df2d079465950ab782c00861fd93814a32b59cb33213e2e12f790a331a8cc402208b9da2079efa3e880f69c2836b713245e3c4d0aa7c241469ae701e88c3db83f24a7fe1af322f8821fb3fec1497fb9c6f1ea1c0732d8d9f7c6e1e671a7f4eecc4391bb1d4cbaed353d3e56d6ffd2f21b8bc5368bb85ec382ce13f92aa9f1b242a19db0ce84c822a246a949156187fe0176c3d58f8e012aa17fa0988cbcd85e8d928a3f491e81e2f943f2dad5c1f5c9a7890bf05d78a2be476c52aa75569f28c1144a7bac3465cba51b81b034fca3a9034c64ded7615e8a3a0712c45e0eb0f936ea6bbe35deae994ca8a5e48d74520900e295e55af7c5f893249a230a76779ae8978b10ba296f6a68bbdf732b77d258ebda9fed5d628f8401400e72c471d8b76e08471c7778cc22ff69eca42099069eda6d80eff70e032c7735727866ca75b83db9d740ece0263d56a9dfda7bff84643a7de6f7d677f5b5baf1409080b132dac45d8dd4b9c64b66bc4d177ae8e311f6520ca8173e01b3e8343461214aaa5cddbc01a3f6f9b18c68bb33f98a025ce67aaae25e69208b378925780d96fe76f8306b2dd1a28ea0eaad4095144399f80a85e2fbb8f982361cb7e7e61ad89deb2c6ddc014a14685360f1aa39fbf2dc574543d606d6afd18922c8cf16a62e0a45d6adafde216473039edc7001e9f8aed45eaddd89c2b1df832dafa9988fba8e795c911ed2706db4adf3b1a7db02994a43be04b9c66268aba436c6ba24c6671b19fec3e032c2216d33909ce1cd140fde160a222acac813bfdfdecd18d289d8073287a2f920bd2e1a75725ff4b805acf9fc249be0634c26193bf03555ccfc3008ef2001570bf72d5127236de2bb776069b9c5d6051e28c0f5f7f55d5e4cf04822b52434ff0ce7c9912ea49b692bd1895701be813cf94fad9dbbf3d303a234e2164014259e51e1795d4383baa8d977cfe07e2fbf215549d9d4667ae273227b85ea8de7d7c874b6d5463d2451f4253df0d86fde47f8a138d6cdc616e2bfbd32269bcd0a87e473b7a4349aacc40e795fbc909143d72472b4b1f3742e3f5b119a75b48632eb3f67c90bcf606526f39b72647c8343031b29c2cde6576c3a1dfa8677efea6c7f1904410f9c1170dce23bd4fb64bec2010f44109a83cbbdcaa3f391731e8e0f410c9588fef26e792b76beb6174d5a3b87848f051825e06d06838edc102271970d326c74065089a658f0354027a8da470bdcf7f9548fe1ab24adf12d3bd1427134de4c3aa039c11af4c74bf111e12953ffa17ffbded8945b1cd1dba33753cdb9fc3a14393b8ec4f8497ce27cafe19ba44fa38549b8f052f83dace969f7801358f41caf2a02a01fcd362f8a9c6469fb843ae4718cf5d7f92558865546879b344d9a489c983187592fd116b94835828247b46a43ddd8306c23d23c1b0f5e3388c1af04f5144252dd216fd56f54336ebf0c15e6f7614c42eb184c0d0e741050a8f01f05663e2b214649167419ec62cf342d4286f0b31398bfd93ff2896ade403a6b72e031a9839d21a82ecc8cec3f477c3cedcacf466881201d22c305794491a9ec595af5fcbac6189114e285282753e17651d395d51fab8750607db79c5b41a69d273d9f186688207e8cf1c2000b52db649bfea760fa80178f33c65123f84369cb4c1f5ead16544af44fd5d7889d347868995f873b53777ff94e167813859f019cfb5a9bb29bdf14bfdbf82349d2b146e95e1245701ffa957d2b8320d3bf198e2f8346cb3a1d237c958f8357df9e8859b68a94974a36ed7b2c32744b9b5e7597a7e5064bbd3a1bb326ccabb4ebefdd6348e3054dcfe9a8ccbf959151f43fc15697d4899dcda889663d0d724afe4c802ff0e9c13d3c0bf2372909d4a640882fd9bc12b63d94e7ad4583e8b95245fa7084118fe594e39cf8cb61033f6602a1c679687b5594db16c9e74611be366af5c8d4ad07831dc3e2123253af0f68fd1711bf608f5515a471301b64329c51b2011a03a8ad6c4e399b3245eb218083351e9a621d713187a65368f94205f17d6870527ff14fdc2577d2f6c15077deb2e7ab0ecc869a05d48d8cdc1dd7ea8456a0bb60e70d78f253ef417d8a386dcc255f1b14227ac7ab4de5a9e0158945767431b5e86c8dd00342aa12b27f98676a278f326b4256f19ecdd3d8fae6c4a815f1fb7df919e74b6a5003ae8d14f1d2b614ac6b02355765922f506f097602ee202eb55e3b45907b461692a4a1afbec463b9d19a81cdc93885596ec465220840c21cdbc30a778e26569416c454d117c003c8b0788332341685fad7357a1a3a3672949a7161d28f4f73b7e01d01e133541f3246bb9eb8f4b26dc149e4295b49c7c8fbcacd4c3e02e77f08283d310a5b56bc0630f33b857589de15d2d6bdda73b7ae6dc37d9bd64fe84178f02873861b060b6ac2f91a3ed84c44d8e03deb87d632fd06d93b8c841d5a2fdaf338142d7e54a120b2e162fe0e4b170bb97762fb172a30cc31b1f679be796f0b4865c0704850969a6c741eb3b9ad2fb059fe5da6cf6d3ef3c4c4aad4dbb578da214a57f334db2128769a7f961542e61cece3c24cefe9f6ffe75db1ec936aaa034e4a0486a1850ff4edceed6ac9d6468033b620373e421b42575af337585ed0d08f5b3f91557c8b5e7b515bb15c957213ce31787a9ec274eeb88ddbcc15396355e37f0239b0cc8867d35bc7f8a719ec415f69833feea59e1d7ec6ea8ea2b5efaacd3b1b53651e6e0983faa60950b92514f0d582b4f214a80101a0784d155b1dc2b2cba21fddb31eb10e8af70352a47c1c8eb90fba97d93d75608acdc8465c6907bbf36f3f36e59bfb1eeafbed14726fd34c2354785f1aa65422cce50bac7a9a51a7ecbd4d1d97ae65ebcc1414eaf000165fb15e037539cdfe0bbff3100395d2a6834fbfae1dad1f269ed290316ee18a0666fe682fdeb832c2e4d7818c0f0896d55e696dfababb0f561afc802cb43fb88fac2f5f8ecc18fa40a9d53b7a3bcc19f193e535b89ea96aab74c39c4928f72ba3a88941043a6a6e87db746b42fcc7e575c25c45694d54d6205abbc33331a869b4c4ecf50528d0fa3dc50ea15873ed2f7ee500194203525f70b70094b4c7280e5e6e325d2493273b4acc8d71352fa64d3bd944a79975f5dd597a85d2ad639b55f5f72ce6dd554f48b9236f5d8652c65b5c3a909b420eb60b8330fe43c17ab31eb2ebe54fb906ffe166c86b29fed4947a97117d2eafce1b20d6485d525b948a906c2864c63005cc0571e386a263fc2b68f03ed2377a0a81a48ff726fecc5c476eb3e36fd796e11bb4f8612b57ad8b9ebc7d3e7a2be68380d9e4a447d590d82713504dc0658525ea88400811753fa6234a01f46d9fa7df62b266b5c889f5286b7c72eff18b0425dd9c2e6f1f9778ffa1d14ceeff7d76e05c93e5215a0b8084e2e4d25984a835534453bd7e0ca7579edbabb8fec973978b37c4e70cb2796a2fba6e6235063857851f94b7cbab38ec1297f89dbaaec4b3a11f86b69b273fcecaa1ba1c6c52bf455be9e495e75651e8e6c7f03874f96596a9deb61c14eb68049f3f07bac5becf8ae8add48a4a1b8ce5776a5debee0738b4d7750865606e747ab7f9a86b6d933220c4771d2277c1ab68b6b24d4238ca83a3e4247d13fcda8af5087848f7aa4d8ccf5347f7041ac5ee4429c64f2aa653ae0e7b7c16d2e35d186b20fa7109a193f38a002ad5fbb18a52810b7278ba3c0a0d831dd350730c1c255f2fa639aab2537115e1ac60be26a9d88c8bfa1100c2ae9fa9b245033b010050065a89a7384a572f5b2f121e77bca3e71a881ab8433bc77f63f0629a6eb9ff395b96576a57e75e583fb085786ebd482db53648ab02486abfd600efca097a68f561e43d3ba027fcb2fe1d0fa6612b066a3c95b0177c78b2bb0c99310a3f51ab8a8290507bb5256afe8e67a31b7c2bb643dbf2cfbeedbbde00d3dc481d8c8bdfcf540e85c9cc1d4c2bccdb13bfd5f3d2a4a320043582af152ca716a1d097a7496e0e040ba7446e1ea8d9f22cdda1835960ddbc64d4828745909b865fcb28025d8769f847783b10f50db50e5de2de3e0c5bedff9b928387cf43c1a621001d5903e5e60c9bdfa01f023b134f224533faaf7f218b9797787ceacd7b96853c58e4247634d4faadf56f9a4480c4673d656758aedca41707e6b3753db3db09f7c3be9233bf429c6a0603a14ca44d78a3a3802e3edf7fe1595fc5870637a262eb2e36473e5520b3ba9af4d46fe5b49d1e3a2812e1f502b58a2aa0a472925ab1f4c8bc3687ef1f7a82700021e70f50edef894bf902285e3c087a7f980289c62c8b282fa52072966131f3f3f33686f270ffe938c3cce1eb0623837ae1ffcceb62c95bfc33a06e45db21a2d46e5a8891fa37b8edf93255d6f4441c3ed4b551b7a949f28cec5e001cc31f9a4057cf79485bea15438f42fed35633674249a9e52b17c2434db28612e7a8060016baef0739c34478df046c9c9959de176ba3a52037cc36410d84a5889ad48e42c509ba21c38d8a561ed2689ffa232554491ea9c0fddb3920c37fc4ced61621a879a6003eddb104a84d11143e31ba57a611112469789eecb0bfa58e6d86b98b0cb2369de8e4032112d70ed3c95032b37d49947d222ab8d91f3a79183c7ea9edd581cf00a2a57928b06ba3511009d8bdbe378084d871eb5ca88885559980c994f0d8d8d8b20f3f9a49705d5a56ba42647a5db3ca3775bc7979512d24b01f27a74a7f2de01ddc92c4f562676f361f5c579954907bf4b99c3a8963777cc2a551aa69873d631cf5d32674a8cfc751cfdab1da79412aacc166e776f512e350849c2250b36e1585f8eaecb515f156a7171c2ab615436105a9095becc24e1370a7409e4c35137c984c146dba9a6e6261ec6e56168756a440818eb58db3a53b60e7735f354956d4b71ee0b9782d1e6dc36a6999a877bc67a75fdecf5eab32f721da105a76a94c24738bbdd2e6603fc71a051e3108f680b2346e215b05364e43a8c4fe2723178e154289681e4078e955bd53858fa04bbe82dcab9c3ce7439f6293ad74dec15f8425d251158edcd7c664d47ad9285978df107a15fb6dd090aeb37a0975dd584ecd987ed494f7a28c32222765aa5147eef2c03bced05a802ce9568fb0a1cd58ba3c9fcce1a925868265a0daffaecb2a0289c7294881fc5519c8425eb201cda5ceafc81c1cc04f2039c1f3cf57a7209d32b23a01e7c146e9e8b6609b8238beff2470cbf300e1c249e5f4a3e965ec5cdd21ea6434429606faa6f96e7e", 0x1000}], 0x1, 0x0, 0x0, 0x20000000}, 0x800)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x1, @loopback}, 0x1c)

01:22:04 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/packet\x00')
setsockopt$inet_tcp_int(r0, 0x6, 0x3, 0x0, 0xfffffffffffffece)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x180200004, 0x0)
ioctl$TCSETAF(r1, 0x5404, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f00000001c0)={{0x40, 0x3}, 'port0\x00', 0x9, 0x100015, 0x8, 0x8, 0x6, 0xfffffffffffffffa, 0x16bf, 0x0, 0x2, 0x2})
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x80000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000300)={@mcast1, 0x42, r5})
r6 = syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x400, 0x0)
write$P9_RLERROR(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x26f)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000280)={@mcast1}, &(0x7f00000002c0)=0x14)
mkdir(&(0x7f0000000340)='./file1\x00', 0x11)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x8000100042, 0x2b0)
accept4(0xffffffffffffffff, &(0x7f0000000000)=@ax25, &(0x7f00000005c0)=0x80, 0x880000)
r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
accept4$alg(r1, 0x0, 0x0, 0x800)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x10000000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$llc(r7, &(0x7f0000000380)={0x1a, 0x1, 0x5, 0x5, 0xc93, 0x8, @link_local}, 0x10)
sendmmsg(r7, &(0x7f0000001380), 0x3fffff1, 0x40)
r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0)

01:22:04 executing program 2:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$ndb(&(0x7f0000000480)='/dev/nbd#\x00', 0xffffffffffffffff, 0x2000)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
socket$alg(0x26, 0x5, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f00000000c0)={0xffff})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000080)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000000, 0x3f00000000000000, 0x0, 0xfffffffe, 0x1107, 0x2000000, 0x0, 0x1000000000000, 0x0, 0x6]}, 0x3})
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x5, 0x500})
r1 = syz_open_dev$usbmon(&(0x7f0000000700)='/dev/usbmon#\x00', 0x0, 0x0)
poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x2000b, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'})
ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8]})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0))
openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0)
ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000800)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002eba4dd466bf8b4ac1fd7837039b702b9d0fa204a7b5df87c3de67d40844e3ddd3c120aee61")
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x14003d, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00')
sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB="000028bd7000fddbdf25020000000800000000000076010001004e23000041d6fd4a2599fb353cd4540210ff73921dde29a6d8bd2262ced844204eca2d190dc5fa4fe82e3e933c348e66d59b1bc76eabf043b3625bc92ea850edd24b465d1f3b4b2df960f26e7d8dd1ea70db1a52eace479d7d8731d5332acafcbcd6ee"], 0x1}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x121102, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0)

01:22:04 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7641bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a73987a938fdedfce7bbba4fec2d8a09c41fb23326079ec15ef2818a17900"}, 0xd8)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x80fd000000000000, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

01:22:04 executing program 1:
r0 = socket$inet6(0xa, 0x100800000000002, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ff9000/0x6000)=nil)
sendfile(r0, r1, 0x0, 0x88004)

01:22:04 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/packet\x00')
setsockopt$inet_tcp_int(r0, 0x6, 0x3, 0x0, 0xfffffffffffffece)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x180200004, 0x0)
ioctl$TCSETAF(r1, 0x5404, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f00000001c0)={{0x40, 0x3}, 'port0\x00', 0x9, 0x100015, 0x8, 0x8, 0x6, 0xfffffffffffffffa, 0x16bf, 0x0, 0x2, 0x2})
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x80000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000300)={@mcast1, 0x42, r5})
r6 = syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x400, 0x0)
write$P9_RLERROR(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x26f)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000280)={@mcast1}, &(0x7f00000002c0)=0x14)
mkdir(&(0x7f0000000340)='./file1\x00', 0x11)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x8000100042, 0x2b0)
accept4(0xffffffffffffffff, &(0x7f0000000000)=@ax25, &(0x7f00000005c0)=0x80, 0x880000)
r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
accept4$alg(r1, 0x0, 0x0, 0x800)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x10000000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$llc(r7, &(0x7f0000000380)={0x1a, 0x1, 0x5, 0x5, 0xc93, 0x8, @link_local}, 0x10)
sendmmsg(r7, &(0x7f0000001380), 0x3fffff1, 0x40)
r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0)

01:22:04 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$ndb(&(0x7f0000000480)='/dev/nbd#\x00', 0xffffffffffffffff, 0x2000)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
socket$alg(0x26, 0x5, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f00000000c0)={0xffff})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000080)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000000, 0x3f00000000000000, 0x0, 0xfffffffe, 0x1107, 0x2000000, 0x0, 0x1000000000000, 0x0, 0x6]}, 0x3})
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x5, 0x500})
r1 = syz_open_dev$usbmon(&(0x7f0000000700)='/dev/usbmon#\x00', 0x0, 0x0)
poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x2000b, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'})
ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8]})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0))
openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0)
ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000800)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002eba4dd466bf8b4ac1fd7837039b702b9d0fa204a7b5df87c3de67d40844e3ddd3c120aee61")
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x14003d, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00')
sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB="000028bd7000fddbdf25020000000800000000000076010001004e23000041d6fd4a2599fb353cd4540210ff73921dde29a6d8bd2262ced844204eca2d190dc5fa4fe82e3e933c348e66d59b1bc76eabf043b3625bc92ea850edd24b465d1f3b4b2df960f26e7d8dd1ea70db1a52eace479d7d8731d5332acafcbcd6ee"], 0x1}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="817ac388b12f5258fcd9f0d1802d2d094bd0d0e7855bb65587033e35e4942bc9d0fb44b760ad4eb4f1c0e1b6b6018e46737c9f3ef43c0032446705d88e599dcf7b90381a6257cdb0172c550c463023776f1889d73cf64e5e19967ce53050d672981e82bb277b6e64f96b089978f45b06118dd38ec6f49c4a5f0756a198e23dc26c4c1b40b453f8a6a705035f3d73f029721205e58b16530e95e37e335a17fb50f9a59803d310b437b97dff7d43aef63e13b0f3502265ad8456e3dcc8818d2b11ca024062576b931ef19a2e89a5fec999111cefb345acb08e92a8db12db71d9c57b10fed4ef4ea908d9232ee8b881a5f0b04c163016bc40bcfe33ccbae912d709a219740b188906ddfe188ce32f50257cc96e7136dd4b05de9014e6774d78fc8b2f0093e578cb391a9d98dd68ec1d9b4a92aac079e4d533e1422645c4f96c864484359baede048e474bbc1f04fd57648b901c679dbfb65084749f0ba8a67e351841109f762f247eb592b0721c3c9f3bcf8cd72d229a9ad31869e37d3c7e3f7a72552c221dfb3369e30b78123a009b66053c42dab26094f06a832518fa8cab73dd627494bc794519e1827cdc9c4e00000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x121102, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0)

[  643.445129] dccp_close: ABORT with 8192 bytes unread
[  643.467824] libceph: connect [d::]:6640 error -101
[  643.472802] libceph: mon0 [d::]:6640 connect error
[  643.495763] libceph: connect [d::]:6640 error -101
[  643.528696] libceph: mon0 [d::]:6640 connect error
[  644.506912] libceph: connect [d::]:6640 error -101
[  644.512008] libceph: mon0 [d::]:6640 connect error
[  645.466593] libceph: connect [d::]:6640 error -101
[  645.471674] libceph: mon0 [d::]:6640 connect error
[  646.508788] libceph: connect [d::]:6640 error -101
[  646.513856] libceph: mon0 [d::]:6640 connect error
[  647.466639] libceph: connect [d::]:6640 error -101
[  647.471714] libceph: mon0 [d::]:6640 connect error
[  648.506632] libceph: connect [d::]:6640 error -101
[  648.511694] libceph: mon0 [d::]:6640 connect error
[  649.467527] libceph: connect [d::]:6640 error -101
[  649.472697] libceph: mon0 [d::]:6640 connect error
[  650.506678] libceph: connect [d::]:6640 error -101
[  650.511746] libceph: mon0 [d::]:6640 connect error
[  651.466552] libceph: connect [d::]:6640 error -101
[  651.471629] libceph: mon0 [d::]:6640 connect error
[  652.507408] libceph: connect [d::]:6640 error -101
[  652.512464] libceph: mon0 [d::]:6640 connect error
[  653.466506] libceph: connect [d::]:6640 error -101
[  653.471655] libceph: mon0 [d::]:6640 connect error
[  654.506584] libceph: connect [d::]:6640 error -101
[  654.511617] libceph: mon0 [d::]:6640 connect error
[  655.466571] libceph: connect [d::]:6640 error -101
[  655.471731] libceph: mon0 [d::]:6640 connect error
[  656.506570] libceph: connect [d::]:6640 error -101
[  656.511587] libceph: mon0 [d::]:6640 connect error
[  657.466574] libceph: connect [d::]:6640 error -101
[  657.471665] libceph: mon0 [d::]:6640 connect error
[  658.517359] libceph: connect [d::]:6640 error -101
[  658.522577] libceph: mon0 [d::]:6640 connect error
[  659.466773] libceph: connect [d::]:6640 error -101
[  659.471783] libceph: mon0 [d::]:6640 connect error
[  660.506546] libceph: connect [d::]:6640 error -101
[  660.511575] libceph: mon0 [d::]:6640 connect error
[  661.466690] libceph: connect [d::]:6640 error -101
[  661.471697] libceph: mon0 [d::]:6640 connect error
[  662.506689] libceph: connect [d::]:6640 error -101
[  662.511777] libceph: mon0 [d::]:6640 connect error
[  663.466519] libceph: connect [d::]:6640 error -101
[  663.471655] libceph: mon0 [d::]:6640 connect error
[  664.507426] libceph: connect [d::]:6640 error -101
[  664.512439] libceph: mon0 [d::]:6640 connect error
[  665.466574] libceph: connect [d::]:6640 error -101
[  665.471575] libceph: mon0 [d::]:6640 connect error
[  666.506523] libceph: connect [d::]:6640 error -101
[  666.511658] libceph: mon0 [d::]:6640 connect error
[  667.466825] libceph: connect [d::]:6640 error -101
[  667.471829] libceph: mon0 [d::]:6640 connect error
[  668.506451] libceph: connect [d::]:6640 error -101
[  668.511469] libceph: mon0 [d::]:6640 connect error
[  669.466466] libceph: connect [d::]:6640 error -101
[  669.471620] libceph: mon0 [d::]:6640 connect error
[  670.507187] libceph: connect [d::]:6640 error -101
[  670.512465] libceph: mon0 [d::]:6640 connect error
[  671.466600] libceph: connect [d::]:6640 error -101
[  671.471612] libceph: mon0 [d::]:6640 connect error
[  672.506540] libceph: connect [d::]:6640 error -101
[  672.511557] libceph: mon0 [d::]:6640 connect error
[  673.467821] libceph: connect [d::]:6640 error -101
[  673.472833] libceph: mon0 [d::]:6640 connect error
[  674.508350] libceph: connect [d::]:6640 error -101
[  674.513362] libceph: mon0 [d::]:6640 connect error
[  675.466432] libceph: connect [d::]:6640 error -101
[  675.471740] libceph: mon0 [d::]:6640 connect error
[  676.507533] libceph: connect [d::]:6640 error -101
[  676.512632] libceph: mon0 [d::]:6640 connect error
[  677.466565] libceph: connect [d::]:6640 error -101
[  677.471604] libceph: mon0 [d::]:6640 connect error
[  678.506658] libceph: connect [d::]:6640 error -101
[  678.511704] libceph: mon0 [d::]:6640 connect error
[  679.466595] libceph: connect [d::]:6640 error -101
[  679.471606] libceph: mon0 [d::]:6640 connect error
[  680.506508] libceph: connect [d::]:6640 error -101
[  680.511538] libceph: mon0 [d::]:6640 connect error
[  681.466608] libceph: connect [d::]:6640 error -101
[  681.471669] libceph: mon0 [d::]:6640 connect error
[  682.507394] libceph: connect [d::]:6640 error -101
[  682.512428] libceph: mon0 [d::]:6640 connect error
[  683.466529] libceph: connect [d::]:6640 error -101
[  683.471569] libceph: mon0 [d::]:6640 connect error
[  684.506423] libceph: connect [d::]:6640 error -101
[  684.511457] libceph: mon0 [d::]:6640 connect error
[  685.466503] libceph: connect [d::]:6640 error -101
[  685.471544] libceph: mon0 [d::]:6640 connect error
[  686.506424] libceph: connect [d::]:6640 error -101
[  686.511466] libceph: mon0 [d::]:6640 connect error
[  687.466473] libceph: connect [d::]:6640 error -101
[  687.471504] libceph: mon0 [d::]:6640 connect error
[  688.507523] libceph: connect [d::]:6640 error -101
[  688.512554] libceph: mon0 [d::]:6640 connect error
[  689.466552] libceph: connect [d::]:6640 error -101
[  689.471829] libceph: mon0 [d::]:6640 connect error
[  690.507070] libceph: connect [d::]:6640 error -101
[  690.512341] libceph: mon0 [d::]:6640 connect error
[  691.467385] libceph: connect [d::]:6640 error -101
[  691.472567] libceph: mon0 [d::]:6640 connect error
[  692.506494] libceph: connect [d::]:6640 error -101
[  692.511699] libceph: mon0 [d::]:6640 connect error
[  693.466462] libceph: connect [d::]:6640 error -101
[  693.471679] libceph: mon0 [d::]:6640 connect error
[  694.507210] libceph: connect [d::]:6640 error -101
[  694.512330] libceph: mon0 [d::]:6640 connect error
[  695.466472] libceph: connect [d::]:6640 error -101
[  695.471522] libceph: mon0 [d::]:6640 connect error
[  696.506423] libceph: connect [d::]:6640 error -101
[  696.511426] libceph: mon0 [d::]:6640 connect error
[  697.466494] libceph: connect [d::]:6640 error -101
[  697.471490] libceph: mon0 [d::]:6640 connect error
[  698.506540] libceph: connect [d::]:6640 error -101
[  698.511771] libceph: mon0 [d::]:6640 connect error
[  699.466438] libceph: connect [d::]:6640 error -101
[  699.471613] libceph: mon0 [d::]:6640 connect error
[  700.142242] libceph: connect [d::]:6640 error -101
[  700.147773] libceph: mon0 [d::]:6640 connect error
[  700.153185] WARNING: CPU: 1 PID: 26297 at net/ceph/messenger.c:3073 clear_standby+0x12f/0x160
[  700.162062] Kernel panic - not syncing: panic_on_warn set ...
[  700.167952] CPU: 1 PID: 26297 Comm: syz-executor0 Not tainted 5.0.0-rc3+ #37
[  700.175116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  700.184444] Call Trace:
[  700.187048]  dump_stack+0x1db/0x2d0
[  700.190658]  ? dump_stack_print_info.cold+0x20/0x20
[  700.195661]  ? clear_standby+0x30/0x160
[  700.199664]  panic+0x2cb/0x65c
[  700.202838]  ? add_taint.cold+0x16/0x16
[  700.206864]  ? clear_standby+0x12f/0x160
[  700.210957]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  700.216505]  ? __probe_kernel_read+0x1f4/0x250
[  700.221074]  ? __warn.cold+0x5/0x48
[  700.224690]  ? clear_standby+0x12f/0x160
[  700.228742]  __warn.cold+0x20/0x48
[  700.232267]  ? clear_standby+0x12f/0x160
[  700.236314]  report_bug+0x263/0x2b0
[  700.239953]  do_error_trap+0x11b/0x200
[  700.243832]  do_invalid_op+0x37/0x50
[  700.247534]  ? clear_standby+0x12f/0x160
[  700.251579]  invalid_op+0x14/0x20
[  700.255030] RIP: 0010:clear_standby+0x12f/0x160
[  700.259809] Code: de e8 b5 77 bb f9 48 85 db 0f 84 39 ff ff ff e8 07 76 bb f9 0f 0b e9 2d ff ff ff e8 ab 67 ff f9 e9 67 ff ff ff e8 f1 75 bb f9 <0f> 0b eb a5 e8 b8 67 ff f9 e9 f6 fe ff ff 4c 89 ef e8 ab 67 ff f9
[  700.278838] RSP: 0018:ffff88808a6476d0 EFLAGS: 00010206
[  700.284194] RAX: 0000000000040000 RBX: ffff888089a40aa8 RCX: ffffc90005dd3000
[  700.291465] RDX: 000000000000ccd0 RSI: ffffffff87c688ff RDI: 0000000000000007
[  700.298723] RBP: ffff88808a6476e8 R08: ffff888086312580 R09: ffffed1011348186
[  700.305975] R10: ffff88808a6476e8 R11: ffff888089a40c2f R12: 0000000000000001
[  700.313227] R13: ffff888089a40be0 R14: ffff88808a647798 R15: ffff888089a40c28
[  700.320512]  ? clear_standby+0x12f/0x160
[  700.324568]  ceph_con_send+0x450/0x610
[  700.328574]  ? ceph_msg_new+0x40/0x40
[  700.332367]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  700.338032]  __send_prepared_auth_request+0x155/0x1b0
[  700.343207]  __open_session+0x3d9/0x570
[  700.347177]  ceph_monc_open_session+0x1a2/0x360
[  700.351833]  __ceph_open_session+0xe2/0x7e0
[  700.356198]  ? bdi_register_va+0x4c/0x80
[  700.360126] kobject: 'ceph-1' (000000004ecebc37): kobject_uevent_env
[  700.360255]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  700.372284]  ? ceph_destroy_client+0x1a0/0x1a0
[  700.376881]  ? kill_block_super+0x100/0x100
[  700.381221]  ? ceph_put_super+0x70/0x70
[  700.385172]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  700.390705]  ? ns_capable_common+0x141/0x170
[  700.395111]  ceph_mount+0x10d2/0x1c80
[  700.398896]  ? ceph_compare_super+0x510/0x510
[  700.403411]  ? m_stop+0x20/0x20
[  700.406819]  ? __get_fs_type+0x9a/0xd0
[  700.410830]  ? find_held_lock+0x35/0x120
[  700.413728] kobject: 'ceph-1' (000000004ecebc37): fill_kobj_path: path = '/devices/virtual/bdi/ceph-1'
[  700.414888]  mount_fs+0x123/0x43a
[  700.414900]  ? emergency_thaw_all+0x260/0x260
[  700.432266]  ? lock_release+0xc40/0xc40
[  700.436232]  vfs_kern_mount.part.0+0xdb/0x570
[  700.440725]  ? may_umount+0xb0/0xb0
[  700.444341]  ? _raw_read_unlock+0x2d/0x50
[  700.448474]  ? __get_fs_type+0x9a/0xd0
[  700.449797] kobject: 'ceph-1' (000000004ecebc37): kobject_cleanup, parent           (null)
[  700.452360]  do_mount+0x58e/0x3330
[  700.464304]  ? lock_release+0xc40/0xc40
[  700.468294]  ? copy_mount_string+0x40/0x40
[  700.472517]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  700.472662] kobject: 'ceph-1' (000000004ecebc37): calling ktype release
[  700.478114]  ? _copy_from_user+0xdd/0x150
[  700.478128]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  700.478139]  ? copy_mount_options+0x30e/0x440
[  700.478148]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  700.478159]  ksys_mount+0xdb/0x150
[  700.478173]  __x64_sys_mount+0xbe/0x150
[  700.489368] kobject: 'ceph-1': free name
[  700.494560]  do_syscall_64+0x1a3/0x800
[  700.507611] libceph: connect [d::]:6640 error -101
[  700.508062]  ? syscall_return_slowpath+0x5f0/0x5f0
[  700.512061] libceph: mon0 [d::]:6640 connect error
[  700.516057]  ? prepare_exit_to_usermode+0x232/0x3b0
[  700.539627]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  700.544473]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  700.549642] RIP: 0033:0x458099
[  700.552817] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  700.571694] RSP: 002b:00007f0b841f7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  700.579380] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458099
[  700.586631] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000020000040
[  700.593889] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  700.601136] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0b841f86d4
[  700.608385] R13: 00000000004c3df1 R14: 00000000004d6da8 R15: 00000000ffffffff
[  700.616889] Kernel Offset: disabled
[  700.620688] Rebooting in 86400 seconds..