X=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:29 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:29 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:29 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:29 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:29 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:29 executing program 5:
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000180)='/contrf\xe9\xd8\\\xfa\xff\x00', 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000700))
r5 = socket$inet(0x2, 0x6000000000000003, 0x6)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
sendto$inet(r5, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendto$inet(r5, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00')
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00'})
socket(0x10, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002280)=ANY=[@ANYBLOB="380000000004000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x4}}, 0x0)

23:37:30 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:30 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:30 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:30 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:30 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:30 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:30 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:30 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:31 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:31 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:31 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:31 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:31 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:31 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:31 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:31 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:31 executing program 3:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60a6a0375079bff305c0f0bbeddd3edfffcfdc456e464d8c1a7da7b7b2d8a43ac3491716431f09760a1563fe6d0296d3c466fe2c062668338b9185831dd35125bdd22378d3cf071a878b7a063b2d46a938629ac3291d146d87e0fe731694a7c32dbaabe14569f75cb0e55047f247d758bba0b8d668926655aad9aa6f2bd7", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:31 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:31 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:32 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:32 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:32 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:32 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:32 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd66"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:32 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:32 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:32 executing program 3:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:32 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:32 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:32 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:33 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:33 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:33 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd66"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:33 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:33 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd66"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:33 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:33 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:33 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:33 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:33 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
socket(0x840000000002, 0x3, 0xff)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:34 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:34 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:34 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
socket(0x840000000002, 0x3, 0xff)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:34 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:34 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd66"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:34 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd66"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:34 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
socket(0x840000000002, 0x3, 0xff)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:34 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:34 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:34 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:34 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:34 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:35 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:35 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:35 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429c"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:35 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:35 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:35 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60a6a0375079bff305c0f0bbeddd3edfffcfdc456e464d8c1a7da7b7b2d8a43ac3491716431f09760a1563fe6d0296d3c466fe2c062668338b9185831dd35125bdd22378d3cf071a878b7a063b2d46a938629ac3291d146d87e0fe731694a7c32dbaabe14569f75cb0e55047f247d758bba0b8d668926655aad9aa6f2bd7", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd66"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:35 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:35 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:35 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:35 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:36 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:36 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:36 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:36 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60a6a0375079bff305c0f0bbeddd3edfffcfdc456e464d8c1a7da7b7b2d8a43ac3491716431f09760a1563fe6d0296d3c466fe2c062668338b9185831dd35125bdd22378d3cf071a878b7a063b2d46a938629ac3291d146d87e0fe731694a7c32dbaabe14569f75cb0e55047f247d758bba0b8d668926655aad9aa6f2bd7", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429c"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:36 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:36 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:36 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:36 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60a6a0375079bff305c0f0bbeddd3edfffcfdc456e464d8c1a7da7b7b2d8a43ac3491716431f09760a1563fe6d0296d3c466fe2c062668338b9185831dd35125bdd22378d3cf071a878b7a063b2d46a938629ac3291d146d87e0fe731694a7c32dbaabe14569f75cb0e55047f247d758bba0b8d668926655aad9aa6f2bd7", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429c"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:36 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:36 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:36 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:36 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:37 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:37 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:37 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:37 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429c"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:37 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:37 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:37 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:37 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60a6a0375079bff305c0f0bbeddd3edfffcfdc456e464d8c1a7da7b7b2d8a43ac3491716431f09760a1563fe6d0296d3c466fe2c062668338b9185831dd35125bdd22378d3cf071a878b7a063b2d46a938629ac3291d146d87e0fe731694a7c32dbaabe14569f75cb0e55047f247d758bba0b8d668926655aad9aa6f2bd7", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429c"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:37 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:37 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:37 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:37 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:38 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:38 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:38 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:38 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:38 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:38 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe84"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:38 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:38 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429c"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:38 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:38 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:38 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:38 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:39 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:39 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:39 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60a6a0375079bff305c0f0bbeddd3edfffcfdc456e464d8c1a7da7b7b2d8a43ac3491716431f09760a1563fe6d0296d3c466fe2c062668338b9185831dd35125bdd22378d3cf071a878b7a063b2d46a938629ac3291d146d87e0fe731694a7c32dbaabe14569f75cb0e55047f247d758bba0b8d668926655aad9aa6f2bd7", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe84"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:39 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:39 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:39 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:39 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:39 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe84"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:39 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:39 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:39 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:39 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:40 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:40 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:40 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe84"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:40 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:40 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:40 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:40 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:40 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe84"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:40 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:40 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:40 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:40 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:41 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:41 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:41 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60a6a0375079bff305c0f0bbeddd3edfffcfdc456e464d8c1a7da7b7b2d8a43ac3491716431f09760a1563fe6d0296d3c466fe2c062668338b9185831dd35125bdd22378d3cf071a878b7a063b2d46a938629ac3291d146d87e0fe731694a7c32dbaabe14569f75cb0e55047f247d758bba0b8d668926655aad9aa6f2bd7", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:41 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:41 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:41 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
socket(0x840000000002, 0x3, 0xff)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:41 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:41 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe84"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:41 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:41 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
socket(0x840000000002, 0x3, 0xff)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:41 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:41 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:42 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:42 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:42 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:42 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
socket(0x840000000002, 0x3, 0xff)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:42 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:42 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:42 executing program 3:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:42 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:42 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:42 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:42 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:42 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(0xffffffffffffffff, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:43 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:43 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(0xffffffffffffffff, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:43 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60a6a0375079bff305c0f0bbeddd3edfffcfdc456e464d8c1a7da7b7b2d8a43ac3491716431f09760a1563fe6d0296d3c466fe2c062668338b9185831dd35125bdd22378d3cf071a878b7a063b2d46a938629ac3291d146d87e0fe731694a7c32dbaabe14569f75cb0e55047f247d758bba0b8d668926655aad9aa6f2bd7", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:43 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:43 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:43 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(0xffffffffffffffff, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:43 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:43 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:43 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:43 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:43 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:44 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:44 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:44 executing program 5:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:44 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x7, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:44 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:44 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:44 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:44 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:44 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:45 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:45 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:45 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:45 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x7, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:45 executing program 5:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x7, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:45 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:45 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:45 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x7, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:45 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:45 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:46 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:46 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x7, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:46 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:46 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:46 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:46 executing program 3:
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000180)='/contrf\xe9\xd8\\\xfa\xff\x00', 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000700))
r5 = socket$inet(0x2, 0x6000000000000003, 0x6)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
sendto$inet(r5, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendto$inet(r5, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00')
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00'})
socket(0x10, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002280)=ANY=[@ANYBLOB="3800000000040000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x4}}, 0x0)

23:37:46 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:46 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x7, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:47 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:47 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:47 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB, @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:47 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:47 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:47 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:47 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:47 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x7, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:47 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:48 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:48 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB, @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:48 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:48 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:48 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB, @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:48 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:48 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:49 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:49 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:49 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:49 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:49 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB, @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:49 executing program 2:
add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:49 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:49 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB, @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:49 executing program 3:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB, @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:50 executing program 2:
add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:50 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:50 executing program 5:
add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:50 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:50 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:50 executing program 2:
add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:50 executing program 5:
add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:50 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:50 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB, @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:50 executing program 2:
keyctl$assume_authority(0x10, 0x0)
r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:50 executing program 5:
add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:51 executing program 3:
add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:51 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:51 executing program 2:
keyctl$assume_authority(0x10, 0x0)
r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:51 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:51 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(0xffffffffffffffff, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:51 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:51 executing program 2:
keyctl$assume_authority(0x10, 0x0)
r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:51 executing program 3:
add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:51 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(0xffffffffffffffff, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:51 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(0xffffffffffffffff, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:51 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:51 executing program 2:
r0 = add_key$user(0x0, &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:51 executing program 5:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:51 executing program 3:
add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:52 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:52 executing program 2:
r0 = add_key$user(0x0, &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:52 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:52 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:52 executing program 2:
r0 = add_key$user(0x0, &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:52 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', 0x0, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:52 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:52 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:52 executing program 5:
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000180)='/contrf\xe9\xd8\\\xfa\xff\x00', 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000700))
r5 = socket$inet(0x2, 0x6000000000000003, 0x6)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
sendto$inet(r5, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendto$inet(r5, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00')
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00'})
socket(0x10, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002280)=ANY=[@ANYBLOB="380000000004000000", @ANYRES32=0x0, @ANYBLOB="701100cf8a7f47d6daff00000000001800120008000100767469010c00020008000100aab4cd7990a5e090ce6c9d21c25debd45a6226e7d2761f0000024cb6e300b0d68f602c46f32ea09826ea9cf9a8a7faf9f9d4f0f8910b3e7dbc6412e9cf619786537719855f30d9d4511bd816c20f39f3137f59e126a20ea68bc181b7646a7bffd65893ec879aec29617d628604a68a0bb7833c6a3e775fccd08464afdc25605a5360445d1b29edbf7a0a8f027a2bc241d4bb9783f5b282dfbd45009bdffeca03aa6f02cfb106ba19f7ab73128cb4c3b5daf4d5ca77d4f1844a567152586c1bd8e028cc10eeb646b0fd8d01abcb5cdba912b3640da2936e8595fa0509debb77057a49f0c14adf5be67fb6a991209cdc751d72bad8ef137e51c50ef67d7d7628c4231eb1a71b352bb46c5b5915a9130af203cd1d6edd767e2d50adb5c86cbbd130eafc77d1e03d019101c84b0023040ff36397aa0f26872fcfc0423d6d", @ANYRES32], 0x4}}, 0x0)

23:37:52 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:53 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60a6a0375079bff305c0f0bbeddd3edfffcfdc456e464d8c1a7da7b7b2d8a43ac3491716431f09760a1563fe6d0296d3c466fe2c062668338b9185831dd35125", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:53 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', 0x0, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:53 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', 0x0, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:53 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:53 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:53 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', 0x0, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:53 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', 0x0, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)